What you saw
Why it happened
TheAuthorization header is there, but the token after Bearer is blank. The usual cause is an env var that didn’t expand (Bearer $MNFST_KEY with MNFST_KEY unset), or a config field saved without a value.
How to fix it
- Log the value your client sends right before the request to confirm the token is actually empty.
- Check your env vars or config file. If the key is missing, generate one from the dashboard.
- Set
Authorization: Bearer mnfst_<your-key>and retry.