# Unauthorized 401 error without context

**URL:** <https://developer.community.nhs.uk/t/unauthorized-401-error-without-context/10489>\
**Category:** e-Referral Service (e-RS)\
**Created:** [4 February 2026 16:44 UTC](https://developer.community.nhs.uk/t/unauthorized-401-error-without-context/10489 "2026-02-04T16:44:59Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![mungles2025](https://avatars.discourse-cdn.com/v4/letter/m/aeb1de/32.png) [@mungles2025](https://developer.community.nhs.uk/u/mungles2025)\
**Post date:** [4 February 2026 16:44 UTC](https://developer.community.nhs.uk/t/unauthorized-401-error-without-context/10489/1 "2026-02-04T16:44:59Z")

</div>

After successfully authing with DEP, I am hitting the worklist endpoint and get the below error.

{  
“message”:“Unauthorized”,  
“request\_id”:“6870a36f5224a37ccaf54c027a0a4307”  
}

This is for Application restricted access. I’m not sure how to interpret this response, so any insight would be helpful. What can I do to troubleshoot?

Thank you!

Application ID is aa6e8c6d-4d23-4d9c-83dd-a4ff6efc5e92  
Correlation ID is 424e8ea4-8521-4329-9c0e-486fb1773ec0

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [5 February 2026 14:44 UTC](https://developer.community.nhs.uk/t/unauthorized-401-error-without-context/10489/2 "2026-02-05T14:44:16Z")

</div>

@Petko_Petkov could your team take a look at this one, i have a seperate log from apim…..something odd happening, but only on DEP (their e-RS INT calls are fine, and they’re sending them in the same way)

---

<div class="post-metadata">

**Author:** ![Petko\_Petkov](https://avatars.discourse-cdn.com/v4/letter/p/ad7895/32.png) [@Petko\_Petkov](https://developer.community.nhs.uk/u/Petko_Petkov)\
**Post date:** [5 February 2026 15:24 UTC](https://developer.community.nhs.uk/t/unauthorized-401-error-without-context/10489/3 "2026-02-05T15:24:54Z")

</div>

Thanks Tony, will begin investigation now.

---

<div class="post-metadata">

**Author:** ![mungles2025](https://avatars.discourse-cdn.com/v4/letter/m/aeb1de/32.png) [@mungles2025](https://developer.community.nhs.uk/u/mungles2025)\
**Post date:** [5 February 2026 15:39 UTC](https://developer.community.nhs.uk/t/unauthorized-401-error-without-context/10489/4 "2026-02-05T15:39:23Z")

</div>

@Petko_Petkov for additional context here is a recent query response to our User Restricted service (again in DEP)

Correlation ID: f6bff753-1e55-4be7-9031-1df37ca45acc

Application ID: 90e78b0a-7359-4284-aeb7-743213cebec6

{  
“message”:“Unauthorized”,  
“request\_id”:“323c7408821cff6bcb402902d58d2d5a”  
}

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [19 February 2026 13:13 UTC](https://developer.community.nhs.uk/t/unauthorized-401-error-without-context/10489/5 "2026-02-19T13:13:30Z")

</div>

Resolution - issue with cert on DEP env. Fixed