The device says its key is invalid, revoked, expired or lacks a scope

What you see

The tablet or tool shows one of these messages:

• “Invalid or revoked API key”
• “API key lacks scope: inventory:write”
• “This API key belongs to a person who no longer has access to the venue”
• “This API key is issued for a different venue”

What each message means

• Invalid or revoked. The key was mistyped, was switched off in Settings → Connections, or is past its expiry date. Compare the first characters of the key on the device with the prefix shown in the list.
• Lacks scope. The key was created without that permission. Permissions cannot be added to an existing key.
• Belongs to a person who no longer has access. The manager who created the key has left the venue. Keys stop working when their creator’s membership ends.
• Issued for a different venue. The device is pointed at a different outlet from the one the key belongs to.

A tablet that was signed out switched off its own key. That is expected. Link it again to bring it back.

How to fix it

All fixes are for an owner or manager.

For a Swift Inventory tablet

Link the tablet again by QR. It receives a fresh key. Have the code shown by an owner or manager who is still in the venue, on a phone that is on the right outlet. See Link a tablet by QR from NOPI.

For a tool that uses a key you created

1. In app.nopi.app, open Settings → Connections → API keys.
2. Find the key by its prefix.
3. If it is revoked or expired, or lacks the permission the device needs, create a new key with the right boxes ticked. Old keys cannot be edited.
4. Enter the new key on the device.
5. If the message says the key’s creator no longer has access, create the new key as an owner or manager who is still in the venue.
6. If the message says “different venue”, switch the device to the outlet the key was created in.

Good to know

Never share the key itself with anyone. If you need help, quote the key’s prefix and the exact message.

Related

• Device keys
• Unlink a tablet or sign out