# Forbidden

URL: /code/api/errors/forbidden · Id: `error:forbidden`

> The key is valid, but its scopes do not allow this operation.

The key is valid, but its scopes do not allow this operation.

| Property | Value |
| --- | --- |
| Type | `https://startupbuilder.dev/errors/forbidden` |
| Status | `403` |
| Fix | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. |
| Raised by | [Startup.build](/business/nouns/startup/build), [Startup.hold](/business/nouns/startup/hold), [Startup.graduate](/business/nouns/startup/graduate), [Startup.sell](/business/nouns/startup/sell), [Startup.clone](/business/nouns/startup/clone), [Startup.claim](/business/nouns/startup/claim), [Template.promote](/business/nouns/template/promote), [Human.remit](/business/nouns/human/remit), [Mandate.authorize](/business/nouns/mandate/authorize), [Mandate.spend](/business/nouns/mandate/spend), [Limit.raise](/business/nouns/limit/raise), [Approval.approve](/business/nouns/approval/approve), [Approval.refuse](/business/nouns/approval/refuse), [Task.assign](/business/nouns/task/assign), [Task.complete](/business/nouns/task/complete), [Task.delegate](/business/nouns/task/delegate), [Action.attest](/business/nouns/action/attest), [Role.staff](/business/nouns/role/staff), [Human.invite](/business/nouns/human/invite), [Domain.transfer](/business/nouns/domain/transfer), [Agreement.sign](/business/nouns/agreement/sign), [Play.apply](/business/nouns/play/apply), [Agent.mint](/business/nouns/agent/mint) |