App Store Connect API — persistent 401 on all endpoints

Hello, I'm having an issue with my App Store Connect API key.

The team API key is returning the following error:

{'status': '401', 'code': 'NOT_AUTHORIZED', 'title': 'Authentication credentials are missing or invalid.}

Account details

  • Account Holder / Admin role
  • Two-Factor Authentication enabled
  • Active developer account with accepted agreements and approved apps

Every App Store Connect API key I generate returns a 401 NOT_AUTHORIZED response on all endpoints (/v1/apps, /v1/bundleIds, /v1/devices, /v1/users). I have:

What I've tried

  • Revoked and regenerated keys multiple times
  • Confirmed the Issuer ID matches exactly what is shown on the Keys page (I used the copy button)
  • Tested from multiple browsers
  • Verified 2FA is enabled
  • Verified no pending license agreements
  • Tested programmatically using a correctly formatted ES256 JWT (proper R+S raw signature, not DER-encoded)

The connection reaches Apple's servers successfully — I receive a JSON 401 response rather than a network error. The JWT is correctly formed. Every endpoint returns 401.

Has anyone experienced this issue? Is there something at account level that could be blocking API access entirely?

Thank you.

App Store Connect API — persistent 401 on all endpoints
 
 
Q