Skip to content

Forbidden

What it means

Auto knows who sent the request, but those credentials aren't allowed to do this. For example, an API key may not have the permission the action needs, or may not have access to this playbook. Sending it again with the same credentials fails the same way.

What to do

Read the problem's detail first. It says what happened to this request.

  • Check which permission the action needs. The HTTP API reference names one for each route: org:read, org:write, playbook:read or playbook:write.
  • Use a credential that has that permission in this organization and for this playbook. Whoever issues your API keys can give you one.
  • Only the person a sign-in or approval request asks can answer it. They confirm or approve it in Studio; their agent can only decline.
  • A link to content a playbook keeps lasts 15 minutes at most. If it has expired, ask for a new one.

Technical details

  • Type: https://on.auto/problems/forbidden
  • Status: 403
  • Reason: forbidden

Responses and errors in the HTTP API reference has the full detail. Problem types lists every type.