# insufficient_scope — Postify API error

HTTP 403 · API credential lacks the required scope

This page is the resolution of the problem `type` URI `https://usepostify.com/docs/api/problems/insufficient-scope`.

The key is valid but was minted without the scope this operation requires. Scopes are fixed at mint — a key can never escalate itself.

## Common causes

- The key was minted with a read-only preset and the request writes (e.g. posts:write for POST /v1/posts).
- Webhook management needs webhooks:read / webhooks:write, which the key lacks.

## How to fix

- Check the required scopes on the operation's docs page — every page lists them.
- Mint a new key with the needed scopes in Settings → API keys, then retire the old one.
- Prefer many narrowly-scoped keys over one all-scope key.

## Example response

```json
{
  "type": "https://usepostify.com/docs/api/problems/insufficient-scope",
  "title": "API credential lacks the required scope",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "This operation requires the posts:write scope.",
  "request_id": "req_6f1f8a2b40d34cd2a6f1e2c9b8d7a601"
}
```

## Related

- [Scope list](https://usepostify.com/docs/api#scopes)
- [Mint a key with different scopes](https://app.usepostify.com/settings/api-keys)