For 400 errors trying to access sensitive files, use the following checklist to troubleshoot common errors/issues:

• Confirm you are using an API tool, not a browser to send the request.
• Confirm you are using the username/password for the system account that created the API key in the authentication header.
• Confirm you used POST and not GET for this request.
• Confirm that the API key is from a production system account and you are attempting to hit a production endpoint.
• Confirm that the system account you are using has “read sensitive” permissions.