Recipe

Diagnose a 401 or 403

401 and 403 are different failures. A 401 means your credential was missing or invalid — the platform does not know who you are. A 403 means it knows you, but you are not allowed to do this. The fix differs accordingly.

2 min read

401Who are you?
403Not permitted
scopeCommon 403 cause

Is it a 401?

The credential is missing, expired or malformed. Re-issue the API key or refresh the OAuth token and attach it correctly. See missing_api_key and invalid_api_key.

Is it a 403?

Your credential is valid but lacks the scope, or the resource belongs to another account. Request a token with the right scope. See insufficient_scope.

Do not retry the same credential

Neither is transient. Retrying the identical token reproduces the identical error. Fix auth first, then call again.

Frequently asked questions

Why is the public ring not affected?

The /public/v1 ring is unauthenticated — there is no credential to be wrong. 401/403 only occur on the partner plane. See the public ring.

A valid key still gives 403 — why?

Scope. A key can be perfectly valid yet not granted the permission the action needs. Request the scope in the partner console.

Funding for UK limited companies

Credicorp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.