← all problem types

missing_scope

403 Forbidden   The token does not carry the scope this operation requires.

When you get it

The token does not carry the scope this operation requires. It is always answered with HTTP 403 - one code means one status, so a client may key its handling on either.

Fields it carries

Inside each errors[] entry, beside pointer:

required

What the operation requires the caller to hold or send.

granted

What the caller actually holds, against which `required` was checked.

A field is omitted when the server genuinely does not know it - an absent member is never the same as an empty one.

How to fix it

The request was understood and refused. Retrying it unchanged will fail identically - change the token, the rights, or the plan named in the fields above.

Shape

{
  "type":   "https://api2.host-tracker.com/problems/missing-scope",
  "title":  "The token does not carry the scope this operation requires.",
  "status": 403,
  "code":   "missing_scope",
  "errors": [
    { "required": …, "granted": … }
  ]
}