# unauthorized

**Sign-in required** · HTTP 401

No credential, or one that isn't valid. On the MCP server, the `WWW-Authenticate` header points to the protected resource metadata so your host can start sign-in.

**What to do:** Send `Authorization: Bearer <key or token>`. Check the key hasn't been revoked.

See [errors](/concepts/errors) for the response format.