HTTP 403 · code: FORBIDDEN

Insufficient permissions

Your API key authenticated successfully, but it does not have the scope required for this operation, or it is a read-only key attempting a write.

Checklist

• Call GET /v1/meto see the key's effective scopes and whether it is read-only.
• Scopes follow service:action (for example database:write, functions:invoke). The error message names the scope that was required.
• Create a key with the right scopes in the console → Settings → API keys — prefer the narrowest scopes that work.
• Read-only keys are enforced across every surface, including agent tool calls.

See security and the API reference for the scope catalog.