I have searched the existing issues and discussions.
I am using the latest version of Open WebUI.
Installation Method
Git Clone
Open WebUI Version
v0.6.0
Ollama Version (if applicable)
No response
Operating System
Ubuntu 20.04
Browser (if applicable)
No response
Confirmation
I have read and followed all instructions in README.md.
I am using the latest version of both Open WebUI and Ollama.
I have included the browser console logs.
I have included the Docker container logs.
I have listed steps to reproduce the bug in detail.
Expected Behavior
When executing a tool on an OpenAPI tool server via POST request, the configured authorization token should be passed in the HTTP header.
Actual Behavior
The authorization HTTP header is missing when making the POST request.
The authorization header is included when saving the tool server configuration and initially fetching the openapi.json spec, but it is missing from all other calls.
Steps to Reproduce
Configure a tool server that requires an API token for all requests.
Create a chat and send a message that makes the AI model use this tool server.
Observe in the browser console that the POST request fails.
Originally created by @tremlin on GitHub (Apr 3, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/12391
### Check Existing Issues
- [x] I have searched the existing issues and discussions.
- [x] I am using the latest version of Open WebUI.
### Installation Method
Git Clone
### Open WebUI Version
v0.6.0
### Ollama Version (if applicable)
_No response_
### Operating System
Ubuntu 20.04
### Browser (if applicable)
_No response_
### Confirmation
- [x] I have read and followed all instructions in `README.md`.
- [x] I am using the latest version of **both** Open WebUI and Ollama.
- [x] I have included the browser console logs.
- [x] I have included the Docker container logs.
- [x] I have listed steps to reproduce the bug in detail.
### Expected Behavior
When executing a tool on an OpenAPI tool server via POST request, the configured authorization token should be passed in the HTTP header.
### Actual Behavior
The authorization HTTP header is missing when making the POST request.
The authorization header is included when saving the tool server configuration and initially fetching the `openapi.json` spec, but it is missing from all other calls.
### Steps to Reproduce
1. Configure a tool server that requires an API token for all requests.
2. Create a chat and send a message that makes the AI model use this tool server.
3. Observe in the browser console that the POST request fails.
### Logs & Screenshots
### Additional Information
The cause seems to be that `key` is missing from the information in https://github.com/open-webui/open-webui/blob/ba77a729256b9df1d582bfc421afde44f465fca2/src/lib/apis/index.ts#L318
Adding `key: server?.key,` solves the issue for me:
GiteaMirror
added the bug label 2026-05-05 17:21:48 -05:00
<!-- gh-comment-id:2775976903 -->
@rgaricano commented on GitHub (Apr 3, 2025):
It would be usefull to have it also noted in https://github.com/open-webui/mcpo/issues
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @tremlin on GitHub (Apr 3, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/12391
Check Existing Issues
Installation Method
Git Clone
Open WebUI Version
v0.6.0
Ollama Version (if applicable)
No response
Operating System
Ubuntu 20.04
Browser (if applicable)
No response
Confirmation
README.md.Expected Behavior
When executing a tool on an OpenAPI tool server via POST request, the configured authorization token should be passed in the HTTP header.
Actual Behavior
The authorization HTTP header is missing when making the POST request.
The authorization header is included when saving the tool server configuration and initially fetching the
openapi.jsonspec, but it is missing from all other calls.Steps to Reproduce
Logs & Screenshots
Additional Information
The cause seems to be that
keyis missing from the information in https://github.com/open-webui/open-webui/blob/ba77a729256b9df1d582bfc421afde44f465fca2/src/lib/apis/index.ts#L318Adding
key: server?.key,solves the issue for me:@rgaricano commented on GitHub (Apr 3, 2025):
It would be usefull to have it also noted in https://github.com/open-webui/mcpo/issues
@tjbck commented on GitHub (Apr 3, 2025):
Addressed in dev.