# Invalid token

The KeenAuth APIs return this problem type with HTTP status 401 (Unauthorized).

## Problem type

| Field | Value |
|---|---|
| Type URI | `https://docs.keenauth.com/errors/invalid_token` |
| Code | `invalid_token` |
| HTTP status | 401 Unauthorized |
| Title | Invalid token |

## Meaning

The dashboard access token or the eu0 identity token is invalid: the scheme is not DPoP, or the typ, alg, kid, signature, iss, aud or lifetime check fails (RFC 6750 §3.1). The response carries `WWW-Authenticate: DPoP error="invalid_token"`.

## Example response

Example response body. `detail` is a human-readable English description that is not meant for end users; `instance` identifies the request.

```json
{
  "type": "https://docs.keenauth.com/errors/invalid_token",
  "title": "Invalid token",
  "status": 401,
  "code": "invalid_token",
  "detail": "...",
  "instance": "urn:idp:request:<request_id>"
}
```

All error codes: [Error reference](/docs/errors).