# forbidden

> The forbidden Problem Details code: The credential is valid but may not do this: a secret key’s scopes or a member’s role lack the operation’s permission, or an IP allow-list or origin check refused the request.

Source: https://docs.nexafone.so/v1/errors/forbidden/

| | |
| --- | --- |
| HTTP status | `403` |
| Area | General |
| Problem `type` | `https://docs.nexafone.so/errors/forbidden` |

The credential is valid but may not do this: a secret key’s scopes or a member’s role lack the operation’s permission, or an IP allow-list or origin check refused the request.

## Handling it

The request is understood but refused; retrying it unchanged fails again.

## Example

```json
{
  "type": "https://docs.nexafone.so/errors/forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "A human-readable explanation of this occurrence.",
  "requestId": "01J9Z8Q4TQ3W6M5V2X7Y8Z9A0B"
}
```

Match on `code`, never on `detail`: the wording may change. See [Problem Details](/v1/errors/).