crewAIInc/crewAI · error · HTTPException

Invalid API key

Error message

Invalid API key

What it means

Error "Invalid API key" thrown in crewAIInc/crewAI.

Source

Thrown at lib/crewai/src/crewai/a2a/auth/server_schemes.py:717

    )
    api_key: CoercedSecretStr = Field(
        description="Expected API key value",
    )

    async def authenticate(self, token: str) -> AuthenticatedUser:
        """Authenticate using API key comparison.

        Args:
            token: The API key to authenticate.

        Returns:
            AuthenticatedUser on successful authentication.

        Raises:
            HTTPException: If authentication fails.
        """
        if token != self.api_key.get_secret_value():
            raise HTTPException(
                status_code=HTTP_401_UNAUTHORIZED,
                detail="Invalid API key",
            )

        return AuthenticatedUser(
            token=token,
            scheme="api_key",
        )


class MTLSServerAuth(ServerAuthScheme):
    """Mutual TLS authentication marker for AgentCard declaration.

    This scheme is primarily for AgentCard security_schemes declaration.
    Actual mTLS verification happens at the TLS/transport layer, not
    at the application layer via token validation.

    When configured, this signals to clients that the server requires

View on GitHub (pinned to 754d7323be)

Solutions

1. Verify the API key is correct and has not been revoked.
2. Set the API key via the expected environment variable or configuration.

When it happens

Trigger: Thrown at lib/crewai/src/crewai/a2a/auth/server_schemes.py:717 when the library encounters an invalid state.

Common situations: Occurs when the provided API key does not match any configured key. Verify the API key value and that it has not been rotated or revoked.

Understand the failure class

• Authentication and authorization failures — expired tokens, bad credentials, and missing scopes.

AI-assisted analysis of crewAIInc/crewAI@754d7323be (2026-08-15). Data as JSON: /api/errors/7bd807eccc2e509c. Report an issue: GitHub.