404.001.03Daraja API errorM-Pesa error 404.001.03: Invalid access token
This is a Daraja API error — Safaricom rejects the request itself, before any customer prompt, usually over authentication or payload validation.
What causes it
Daraja reports the access token as invalid on HTTP 404; often the token is fine but the shortcode is not authorized/whitelisted for that specific API.
How to fix it
Confirm the token is valid and current, and contact Safaricom to enable/whitelist the API on your production shortcode.
How paylod handles this
paylod manages Daraja OAuth tokens, request signing, and payload formatting for you — the whole class of authentication and malformed-request errors is handled by the wrapper, so you send one clean REST call and get a typed response.
See the paylod M-Pesa API