---
title: "forbidden error"
url: "https://lookvalid.com/docs/errors/forbidden.md"
canonical_url: "https://lookvalid.com/docs/errors/forbidden"
last_updated: "2026-10-22"
type: "reference"
summary: "HTTP 403 forbidden: This API key is not allowed to make this request. Cause, fix and a curl example."
related: ["https://lookvalid.com/docs/errors.md", "https://lookvalid.com/docs/authentication.md"]
---

# forbidden error

HTTP 403 forbidden: This API key is not allowed to make this request. Cause, fix and a curl example.

`forbidden` is returned with HTTP **403**. Retryable: no. Sending the same request again returns the same error. Nothing is charged for this error.

## What it means

This API key is not allowed to make this request.

## Most likely cause

The credential is valid but the account is not allowed to do this. The usual case is creating an API key when the account already holds the maximum number of active keys.

## How to fix it

Use a key from an account that has access to this product, or ask the account owner to grant access.

## Example

Key management uses the signed-in dashboard session token, not an API key. With the maximum number of active keys, this call returns HTTP 403.

```sh
curl -i -X POST https://YOUR_API_HOST/v1/me/keys -H "Authorization: Bearer $FIREBASE_ID_TOKEN" -H "Content-Type: application/json" -d '{"name":"ci"}'
```

An error response is one JSON envelope. Branch on `code`, never on the message text. The `message` and `fix` of a real response can be more specific than the defaults shown here.

```json
{
  "error": {
    "code": "forbidden",
    "message": "This API key is not allowed to make this request.",
    "fix": "Use a key from an account that has access to this product, or ask the account owner to grant access.",
    "docs_url": "https://lookvalid.com/docs/errors/forbidden",
    "retryable": false,
    "request_id": "req_3fK9pQ2xVb7LmN4sTz8WcA"
  }
}
```

## See also

- [All error codes](https://lookvalid.com/docs/errors.md) with the response envelope.
- [Authentication](https://lookvalid.com/docs/authentication.md).
- Quote the `request_id` when you write to [hello@lookvalid.com](mailto:hello@lookvalid.com).

## Related

- [Errors](https://lookvalid.com/docs/errors.md)
- [Authentication](https://lookvalid.com/docs/authentication.md)