2 min read
Is it a 401?
The credential is missing, expired or malformed. Re-issue the API key or refresh the OAuth token and attach it correctly. See missing_api_key and invalid_api_key.
Is it a 403?
Your credential is valid but lacks the scope, or the resource belongs to another account. Request a token with the right scope. See insufficient_scope.
Do not retry the same credential
Neither is transient. Retrying the identical token reproduces the identical error. Fix auth first, then call again.
Frequently asked questions
Why is the public ring not affected?
The /public/v1 ring is unauthenticated — there is no credential to be wrong. 401/403 only occur on the partner plane. See the public ring.
A valid key still gives 403 — why?
Scope. A key can be perfectly valid yet not granted the permission the action needs. Request the scope in the partner console.
Funding for UK limited companies
Credicorp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.