HTTP 403API credential lacks the required scope

insufficient_scope

The key is valid but was minted without the scope this operation requires. Scopes are fixed at mint — a key can never escalate itself.

This page is where the problem type URI https://usepostify.com/docs/api/problems/insufficient-scope resolves.

Common causes

  • The key was minted with a read-only preset and the request writes (e.g. posts:write for POST /v1/posts).
  • Webhook management needs webhooks:read / webhooks:write, which the key lacks.

How to fix

  • Check the required scopes on the operation's docs page — every page lists them.
  • Mint a new key with the needed scopes in Settings → API keys, then retire the old one.
  • Prefer many narrowly-scoped keys over one all-scope key.

Example response

403 · application/problem+json
{
  "type": "https://usepostify.com/docs/api/problems/insufficient-scope",
  "title": "API credential lacks the required scope",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "This operation requires the posts:write scope.",
  "request_id": "req_6f1f8a2b40d34cd2a6f1e2c9b8d7a601"
}

Related