---
title: What should I do if I am receiving a 400 error when attempting to access sensitive files in SAM.gov?
description: "For 400 errors trying to access sensitive files, use the following checklist to troubleshoot common errors/issues: - Confirm you are using an API tool, not a browser to send the request. - Confirm you are using the username/password for the…"
url: "https://www.gsascheduleservices.com/kb/sam/what-should-i-do-if-i-am-receiving-a-400-error-when-attempting-to-access-sensitive-files-in-sam-gov/"
updated: "2022-04-13"
category: After Award / Compliance / SAM Record
tags:
  - sam
---

# What should I do if I am receiving a 400 error when attempting to access sensitive files in SAM.gov?

For 400 errors trying to access sensitive files, use the following checklist to troubleshoot common errors/issues:

- Confirm you are using an API tool, not a browser to send the request.
- Confirm you are using the username/password for the system account that created the API key in the authentication header.
- Confirm you used POST and not GET for this request.
- Confirm that the API key is from a production system account and you are attempting to hit a production endpoint.
- Confirm that the system account you are using has “read sensitive” permissions.

 [ctabanner id='1640100413']