It appears the web-ui doesn't use the authentication token to get symbols. The endpoint is https://apiv3.gns3.net/#/Symbols/get_symbol_v3_symbols__symbol_id__raw_get   Removing the required authentication on the endpoint solves the issue but this is a temporary fix.