Crossref incident
Metadata Plus REST API not validating API keys
Crossref experienced a critical incident on October 5, 2026 affecting Plus REST API, lasting 4h 3m. The incident has been resolved; the full update timeline is below.
Affected components
Plus REST API
Update timeline
- investigating Oct 05, 2026, 12:21 PM UTC
Request to the Metadata Plus pool of the REST API are receiving 401 responses (access denied). We are investigating the cause.
- investigating Oct 05, 2026, 12:41 PM UTC
The API is back up but we are still investigating and monitoring.
- investigating Oct 05, 2026, 12:49 PM UTC
We are continuing the investigate the outage. The Plus pool was down between 12:00 and 12:36 on 5 Oct, 2026.
- monitoring Oct 05, 2026, 01:01 PM UTC
A fix has been implemented and we are continuing to monitor the performance of the Metadata Plus pool.
- resolved Oct 05, 2026, 04:25 PM UTC
We have identified the problem due to a bug in a deployment. The deployment was reversed and the Plus pool of the API is working normally again.