API

insufficient_scope

HTTP 403. Insufficient scope

What it means

The token lacks a scope the operation needs.

What to do

required_scopes lists what is missing. All scopes an operation lists are required. A token can only be given scopes that its creator holds, and orders:accept can only be granted by a person in the web app. See scopes.

Retrying

Do not retry the same request. Change it first.

Extra members

required_scopes: The scopes the call needed that the token does not hold.

Example

json

{
  "type": "https://reuseforge.com/docs/api/errors/insufficient_scope",
  "title": "Insufficient scope",
  "status": 403,
  "detail": "This token cannot release escrow. It needs the orders:accept scope.",
  "instance": "/api/v1/orders/ord_tqjv5mw3k2na/accept",
  "code": "insufficient_scope",
  "request_id": "req_c4v8n2m6x1z3",
  "required_scopes": [
    "orders:accept"
  ]
}

Every error is application/problem+json (RFC 9457). Branch on code, show detail to people and quote request_id when you ask for help. See the error catalogue.