HTTP 403 Forbidden
The server understood you but refuses to act. You're known, but not allowed.
Common causes and fixes
- Check permissions, roles, IP allow lists and CORS or WAF rules.
- Logging in again won't help; the account lacks access.
Example response
HTTP
HTTP/1.1 403 Forbidden
Content-Type: application/json; charset=utf-8
{ "error": "Forbidden" }Look up the headers shown here in the HTTP headers reference.
Common questions
- What does HTTP 403 mean?
- Forbidden. The server understood you but refuses to act. You're known, but not allowed.
- How do I fix a 403 error?
- Check permissions, roles, IP allow lists and CORS or WAF rules. Logging in again won't help; the account lacks access.
- Is 403 an error?
- Yes. 4xx codes are client errors: The request contains a mistake or can't be fulfilled as sent.
Other 4xx codes
400 Bad Request401 Unauthorized402 Payment Required404 Not Found405 Method Not Allowed406 Not Acceptable407 Proxy Authentication Required408 Request Timeout409 Conflict410 Gone411 Length Required412 Precondition Failed413 Content Too Large414 URI Too Long415 Unsupported Media Type416 Range Not Satisfiable417 Expectation Failed418 I'm a teapot421 Misdirected Request422 Unprocessable Content423 Locked424 Failed Dependency425 Too Early426 Upgrade Required428 Precondition Required429 Too Many Requests431 Request Header Fields Too Large451 Unavailable For Legal Reasons