token_invalid

HTTP 401: Token invalid

When it occurs

The bearer token in the Authorization header isn't a live token. It's missing, malformed, carries the wrong xca_ prefix, or was never issued. This is also what a cross-origin browser call gets (LIM-05) and what a token-shaped string found in the URL instead of the header gets (PRIN-01).

What to do next

Check the header reads Authorization: Bearer xca_live_... or xca_test_..., matching exactly what your team operator handed you at /team/tokens. If the token really is gone, create a replacement there.