diff --git a/CHANGELOG.md b/CHANGELOG.md
index 09d1306..36a950a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,9 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## Unreleased
+- Replace auth header from 'X-Session' to 'X-Api-Key' in Dispatcher requests
+
 ## [0.24.0] (2025-09-23)
 ### Bug
 - Fixed bug on local cryptography hints detection
diff --git a/src/sdk/scanner/Dispatcher/Dispatcher.ts b/src/sdk/scanner/Dispatcher/Dispatcher.ts
index cca4a93..8759bb8 100644
--- a/src/sdk/scanner/Dispatcher/Dispatcher.ts
+++ b/src/sdk/scanner/Dispatcher/Dispatcher.ts
@@ -182,7 +182,7 @@ export class Dispatcher extends EventEmitter {
           'User-Agent': this.scannerCfg.CLIENT_TIMESTAMP
             ? this.scannerCfg.CLIENT_TIMESTAMP
             : `scanoss-js/v${Utils.getPackageVersion()}`,
-          'X-Session': this.scannerCfg.API_KEY,
+          'X-Api-Key': this.scannerCfg.API_KEY,
           'x-request-id': item.uuid,
         },
         signal: timeoutController.signal,