unauthenticated

This operation needs a signed-in user, API key or MCP token, and the request had none (or an invalid one).

Common causes

• No Authorization: Bearer ... header, or the session token expired or was revoked.
• On /mcp: no valid castra_mcp_... token.

How to fix

Sign in again or send a valid bearer token.

Response

{
  "type": "https://castra.mehmetozer.dev/problems/unauthenticated",
  "title": "…",
  "status": 401,
  "detail": "…"
}

detail says what exactly went wrong for this request.