# Bug My API calls work locally but return 401 Unauthorized on [host, e.g. Vercel] production. ## Context - Endpoint: [endpoint] - How the token is sent: [e.g. Authorization: Bearer header] - Env vars used: [names only — no values] ## Steps 1. List the likely causes (env vars, domains, cookies, CORS). 2. Tell me exactly what to check for each. 3. Give the fix once we find it. ## Constraints - Never ask me to paste secret values. - Don't suggest disabling auth.
Write better AI coding prompts and get working code on the first try — free at zoeyprompts.com.