AI-103 Certification Practice Question #21

Question

You have a Microsoft Foundry project named Project1 that contains the following:
An OpenAPI tool that calls an external API
A project connection named Connection1 that stores the API key of the external API
When an agent calls the OpenAPI tool, the API returns a 401 unauthorized error, and traces show that the API key header is NOT being sent.
You need to ensure that the OpenAPI tool automatically includes the API key from Connection1 on all requests.
What should you do?

Accepted Answer

The 401 with no API-key header means the OpenAPI spec has no `securitySchemes`/`security` entry of type `apiKey`, so Foundry never knows which header to populate from the connection. Per MS Learn, you authenticate an OpenAPI tool by adding an `apiKey` security scheme (with the header `name` matching the connection key) and a `security` section to the spec — i.e., you define the API-key header in the OpenAPI specification. Connection1 supplies the secret value, but the spec is what makes the tool attach it as a header. Merely "connecting to Connection1" (D) without the spec scheme is what produces the observed missing-header behavior, so B is the action that fixes it. Confidence is held in the mid-80s because there is no community vote data and D is a plausible distractor.

More AI-103 practice questions