Skip to main content
The API key is valid, but it lacks the scope required for this endpoint or parameter.
403 application/problem+json
Every PermitCore error is RFC 9457 application/problem+json. Branch on type (a stable URI), not on title or detail (human-readable, may change).

​
When it occurs

Your key authenticated successfully, but the endpoint requires a scope (e.g. query) that this key was not granted.

​
How to fix

Create or request a key with the required scope from permitcore.io/account/api-keys, or contact support if you believe your tier should include it. This is not retryable with the same key. Not retryable — fix the request before resubmitting; retrying unchanged returns the same error. See the full error catalog for the response shape and retry matrix. Every response carries an x-request-id header — include it in any support request.