Enum ApiKeyRejection

Namespace

MailFathom.Infrastructure.Security.ApiKeys

Assembly

MailFathom.Infrastructure.dll

Why a presented MCP credential was refused.

public enum ApiKeyRejection

Fields

CredentialExpired = 3

A well-formed credential was presented that matches a configured key whose lifetime has ended.

CredentialMalformed = 1

The header was present but is not a Bearer credential this endpoint could read.

CredentialMissing = 0

The request carried no Authorization header at all.

CredentialUnrecognized = 2

A well-formed credential was presented that matches no configured key.

Remarks

Every value produces the same response, so this vocabulary exists for the server log and never for the caller. A client that learned the difference between an unrecognized key and an expired one would learn that a key it holds once existed, which is one bit more than a refusal is allowed to say.