# Invalid API for simple single flight query using personal acct

**URL:** <https://discussions.flightaware.com/t/invalid-api-for-simple-single-flight-query-using-personal-acct/100072>\
**Category:** AeroAPI\
**Created:** [February 3, 2026, 7:05am UTC](https://discussions.flightaware.com/t/invalid-api-for-simple-single-flight-query-using-personal-acct/100072 "2026-02-03T07:05:47Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![obsfucate](https://sea1.discourse-cdn.com/flex019/user_avatar/discussions.flightaware.com/obsfucate/32/133102_2.png) [@obsfucate](https://discussions.flightaware.com/u/obsfucate)\
**Post date:** [February 3, 2026, 7:05am UTC](https://discussions.flightaware.com/t/invalid-api-for-simple-single-flight-query-using-personal-acct/100072/1 "2026-02-03T07:05:47Z")

</div>

I am testing to the api to see if I want a paid account. I picked a flight that is en route and used my valid api key or the one listed under my account. The call is  
curl -X GET “[https://aeroapi.flightaware.com/aeroapi/flights/TP675”](https://aeroapi.flightaware.com/aeroapi/flights/TP675%E2%80%9D) -H “Authorization: Bearer JfsdY6n\_\_\_\_\_\_\_1o2T666YeKKj””  
{“title”: “Invalid API key”, “reason”: “INVALID\_API\_KEY”, “detail”: “Provided API key is not valid”, “status”: 401}  
I just want to see if TP675 is in the air. It is pretty discouraging. Seems really basic.

---

<div class="post-metadata">

**Author:** ![cbw](https://sea1.discourse-cdn.com/flex019/user_avatar/discussions.flightaware.com/cbw/32/117000_2.png) [@cbw](https://discussions.flightaware.com/u/cbw)\
**Post date:** [February 3, 2026, 1:19pm UTC](https://discussions.flightaware.com/t/invalid-api-for-simple-single-flight-query-using-personal-acct/100072/2 "2026-02-03T13:19:16Z")

</div>

Are you using the key that you have provided above? I do not see that as your key. You can find your key at [AeroAPI Developer Portal - FlightAware](https://www.flightaware.com/aeroapi/portal/) .

---

<div class="post-metadata">

**Author:** ![obsfucate](https://sea1.discourse-cdn.com/flex019/user_avatar/discussions.flightaware.com/obsfucate/32/133102_2.png) [@obsfucate](https://discussions.flightaware.com/u/obsfucate)\
**Post date:** [February 3, 2026, 2:47pm UTC](https://discussions.flightaware.com/t/invalid-api-for-simple-single-flight-query-using-personal-acct/100072/3 "2026-02-03T14:47:03Z")

</div>

I pasted an older attempt, because I have tried multiple different things. Here is one from just now

 ![FA](https://us1.discourse-cdn.com/flex019/uploads/flightaware/original/3X/c/f/cf0085f23a6be7579bd9de14195c4e085a9c12ff.jpeg)

---

<div class="post-metadata">

**Author:** ![cbw](https://sea1.discourse-cdn.com/flex019/user_avatar/discussions.flightaware.com/cbw/32/117000_2.png) [@cbw](https://discussions.flightaware.com/u/cbw)\
**Post date:** [February 6, 2026, 9:39pm UTC](https://discussions.flightaware.com/t/invalid-api-for-simple-single-flight-query-using-personal-acct/100072/4 "2026-02-06T21:39:49Z")

</div>

I was just able to impersonate your account and used this key to make the call for TP675 in the documentation panel without it throwing an error, so it would appear that the API key is valid and not throwing an error when trying to receive data.

---

<div class="post-metadata">

**Author:** ![obj](https://sea1.discourse-cdn.com/flex019/user_avatar/discussions.flightaware.com/obj/32/118984_2.png) [@obj](https://discussions.flightaware.com/u/obj)\
**Post date:** [February 7, 2026, 5:12am UTC](https://discussions.flightaware.com/t/invalid-api-for-simple-single-flight-query-using-personal-acct/100072/5 "2026-02-07T05:12:56Z")

</div>

AFAIK you should use `x-apikey`, not bearer auth.

[https://www.flightaware.com/aeroapi/portal/#auth](https://www.flightaware.com/aeroapi/portal/#auth)