insufficient_scope

HTTP 403§9.1 Transport, authentication, and tenancy

The key is valid but does not carry the scope this endpoint declares (03-domain-model.md §Authorization lists the twenty-five). Also raised by the key-management routes when a caller tries to grant a scope it does not hold, or to revoke or rotate a key broader than itself (§1).

Problem shape

Every non-2xx response is an RFC 9457 application/problem+json body. The type URI below is stable and machine-matchable, so branch on the final path segment (the code) and treat the status as redundant confirmation. See the error-handling guide.

{
  "type": "https://docs.vocapable.com/errors/insufficient_scope",
  "title": "…",
  "status": 403,
  "detail": "…",
  "instance": "/v1/…"
}

← Back to the error registry