unauthorized

HTTP 401 Unauthorized

An inbound webhook endpoint rejected the call because its signature or secret is missing or wrong. These endpoints receive events from services that qr3.app itself uses; they are not part of the API you call with an API key. A missing or invalid API key answers authentication instead.

Triggers

• Clerk webhook: at POST /v1/webhooks/clerk, one of the headers svix-id, svix-timestamp or svix-signature is missing, or the Svix signature does not match the body.
• EU registry webhook: at POST /v1/webhooks/eu-registry, the Authorization header is missing or does not carry the configured registry secret.

{
  "type": "https://docs.qr3.app/errors/unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "detail": "Invalid Svix signature"
}

← Error Reference