Unauthorized
Generic 401 Unauthorized. Used when a request lacks valid authentication — e.g. internal SFTP authenticate/tier-gate, storage-node internal auth, nginx upload-limits, or other guarded APIs mapped to auth.unauthorized.
Why this happens
Missing session/cookie, wrong/missing internal secret, expired credentials, or caller not allowed. Catalog area is auth; surfaces include member-facing and server-to-server paths.
Diagnose and fix
1. Member UI: sign in again; hard refresh; retry.
2. Integrations/SFTP nodes: verify API keys, node secrets, and that the app can reach internal routes.
3. Admin: check logs for which route returned 401.
4. Distinct from Forbidden/permission messages and from validation errors on authenticated calls.