# invalid_token (HTTP 401)

invalid_token (HTTP 401) from the GetItDone API: An OAuth 2.1 access token was supplied but is expired, malformed, or revoked.

Seeing this in an AI assistant or MCP connector, not from our API? Read [what "invalid access token" means](https://nowgetitdone.com/blog/invalid-access-token-api-key-meaning).

- **HTTP status:** 401
- **Problem type URI:** https://nowgetitdone.com/docs/api/problems/invalid-token

## What it means

An OAuth 2.1 access token was supplied but is expired, malformed, or revoked.

## Likely causes

- The access token has passed its expiry.
- The token was issued by a different authorization server or for a different resource.

## How to fix

- Refresh the access token using your refresh token (request the `offline_access` scope to receive one).
- Re-run the OAuth authorization flow if the grant was revoked.

## Example problem+json

```json
{
    "type": "https://nowgetitdone.com/docs/api/problems/invalid-token",
    "title": "Invalid access token",
    "status": 401,
    "code": "invalid_token",
    "request_id": "req_a1b2c3d4"
}
```

## Related

- [Authentication](/docs/api#authentication)
- [What "invalid access token" means in AI assistants and MCP connectors](https://nowgetitdone.com/blog/invalid-access-token-api-key-meaning)