← Error catalogue

403 Forbidden

The key is valid, but not allowed to perform this request.

Machine code: forbidden

The key lacks the scope the endpoint requires, or the request targets a provider the key is not bound to.

How to resolve

Check the key's scopes with GET /v1/meta/status (and GET /v1/meta/scopes for what each grant allows), and confirm the key is bound to the target provider.

Response shape

Every error is an RFC 9457 application/problem+json document with a machine code and a trace_id you can quote to support.

{
  "type": "https://docs.openiris.io/errors/403",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "Key does not carry the required scope 'bookings:write'.",
  "instance": "/v1/bookings",
  "trace_id": "0HMVABCDEF123"
}