API key is missing, expired, revoked, or lacks permission

What you may be seeing

• An integration gets authentication/permission errors or the user cannot recover the raw key from Settings.

What usually causes it

• The raw key was not stored when created and cannot be displayed again.
• The key expired/revoked.
• The key lacks the required resource scope.
• The plan lacks api_access for minting a new key.

Do this

1. Open Settings → Developer and inspect the key row for scopes, expiry and revoked status.
2. If the raw secret was lost, mint a new key; CanvasRelay intentionally cannot reveal an existing raw key because only its hash is stored.
3. Choose the minimum scopes the integration needs and store the new crk_ value immediately.
4. Revoke superseded keys after the integration is moved to the replacement.

You know it is fixed when

• The integration authenticates with the new/valid scoped key and the key's last-used value updates after use.