# Trouble Hitting API Endpoints - 401 **URL:** \ **Category:** Ignition\ **Tags:** security\ **Created:** [October 8, 2026, 5:24pm UTC](https://forum.inductiveautomation.com/t/trouble-hitting-api-endpoints-401/117390 "2026-10-08T17:24:27Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![sebastian.hothaza](https://avatars.discourse-cdn.com/v4/letter/s/3ec8ea/32.png) [@sebastian.hothaza](https://forum.inductiveautomation.com/u/sebastian.hothaza)\ **Post date:** [October 8, 2026, 5:24pm UTC](https://forum.inductiveautomation.com/t/trouble-hitting-api-endpoints-401/117390/1 "2026-10-08T17:24:27Z")
I am trying to use Postman to hit my API and I am having difficulty in authenticating my requests. I have attached the `X-Ignition-API-Token`as a header in Postman. I have the API key configured as follows: ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/e/4/e4d0bea7c77d617a8742925ed46898d73b1ba061.png) Note it is not requiring secure connections as I am hitting on http In my security levels I have it configured as follows: ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/f/3ff6c201b6b6eaf4bb4fdf463edec39e5c14c669.png) and similarly for gateway read permissions and gateway access permissions. Any idea on what I may be missing? Thanks! ---
**Author:** ![Sfenwick](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sfenwick/32/82355_2.png) [@Sfenwick](https://forum.inductiveautomation.com/u/Sfenwick)\ **Post date:** [October 8, 2026, 5:57pm UTC](https://forum.inductiveautomation.com/t/trouble-hitting-api-endpoints-401/117390/2 "2026-10-08T17:57:35Z")
Welcome to the forum! I suspect it might be how the header is configured in Postman, maybe the key isn't being referenced properly? Please see [Ignition 8.3 API Usage Guide (via Postman)](https://forum.inductiveautomation.com/t/ignition-8-3-api-usage-guide-via-postman/93935) ---
**Author:** ![sebastian.hothaza](https://avatars.discourse-cdn.com/v4/letter/s/3ec8ea/32.png) [@sebastian.hothaza](https://forum.inductiveautomation.com/u/sebastian.hothaza)\ **Post date:** [October 8, 2026, 6:06pm UTC](https://forum.inductiveautomation.com/t/trouble-hitting-api-endpoints-401/117390/3 "2026-10-08T18:06:48Z")
Thank you! I did try to follow that guide. I tried both using the imported setup as well as just a "raw" html GET request with Postman. Do you see any issue with my postman query? ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/9/d/9d8dc7b177b3eafba8c320ae6cce49a5303f808a.png) ---
**Author:** ![Sfenwick](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sfenwick/32/82355_2.png) [@Sfenwick](https://forum.inductiveautomation.com/u/Sfenwick)\ **Post date:** [October 8, 2026, 6:28pm UTC](https://forum.inductiveautomation.com/t/trouble-hitting-api-endpoints-401/117390/4 "2026-10-08T18:28:25Z")
For the Value of X-Ignition-API-Token, is the name of the token on the Gateway the same as in Postman? Like this for example. Might also be worth checking if [http://localhost:8088/data/api/v1/resources/singleton/ignition/security-properties](http://localhost:8088/data/api/v1/resources/singleton/ignition/security-properties) work ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/a/0a5c1cb4aa835a76fba2b2d345b9e504e6d916af.png) ---
**Author:** ![sebastian.hothaza](https://avatars.discourse-cdn.com/v4/letter/s/3ec8ea/32.png) [@sebastian.hothaza](https://forum.inductiveautomation.com/u/sebastian.hothaza)\ **Post date:** [October 8, 2026, 6:47pm UTC](https://forum.inductiveautomation.com/t/trouble-hitting-api-endpoints-401/117390/5 "2026-10-08T18:47:10Z")
That was the issue! I was putting the value as the API key directly; didn't realize we needed the name of the key also included. Thanks!