> ## Documentation Index
> Fetch the complete documentation index at: https://docs.permitcore.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Missing scope

> 403 — The API key is valid, but it lacks the scope required for this endpoint or parameter.

The API key is valid, but it lacks the scope required for this endpoint or parameter.

```json 403 application/problem+json theme={null}
{
  "type": "https://docs.permitcore.io/errors/missing-scope",
  "title": "Missing scope",
  "status": 403,
  "detail": "…",
  "instance": "/v1/permits/target",
  "request_id": "req_1f07fb45782b445e9f6312ba23921234"
}
```

Every PermitCore error is [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457)
`application/problem+json`. **Branch on `type` (a stable URI)**, not on `title`
or `detail` (human-readable, may change).

## When it occurs

Your key authenticated successfully, but the endpoint requires a scope (e.g. `query`) that this key was not granted.

## How to fix

Create or request a key with the required scope from [permitcore.io/account/api-keys](https://permitcore.io/account/api-keys), or contact support if you believe your tier should include it. This is not retryable with the same key.

**Not retryable** — fix the request before resubmitting; retrying unchanged returns the same error.

See the full [error catalog](/errors) for the response shape and retry matrix.
Every response carries an `x-request-id` header — include it in any support request.