api_key.scope_denied
The API key does not carry the scope required by this route.
api_key.scope_denied is returned when the API key JWT is valid, not expired, and not revoked, but does not carry the scope claim required by the requested route. Scope checks happen after signature and revocation checks.
The key was minted without the scope required by this endpoint. For example, a key scoped to calls.read attempting a route that requires webhooks.manage.
Mint a new API key that includes the required scope, or use an existing key that has the necessary scope. Review the endpoint's required scope in the API reference.
{
"error": {
"code": "api_key.scope_denied",
"message": "API key missing required scope",
"request_id": "req_01900000abc"
}
}