Error codes · Permissions and account

Insufficient scope

Codeinsufficient_scope
Status403
If this was an orderBought nothing — an earlier copy may have: resume the same id
Send it again unchanged?No — change something first
.NET SDKAuthorizationException

An earlier copy of this order may have gone through

This request bought nothing, but it was refused before Anis looked at the order, so it says nothing about an earlier attempt with the same operation id. Fix the cause first (restore access, or fix how the request is signed), then resume the same id (or read it with GET /orders/{operationId}). Never place it again under a new id.

What it means

Your application may not make this call: its permissions do not include the one this route needs, or the call came from an address outside the application’s allowed networks. Both get this same answer on purpose.

What to do

  • Read your profile (GET /profile) from the same host. If it answers, your network is accepted: compare the permissions it lists with the one this route needs. If it is refused as insufficient_scope too, the cause is the network you call from (or a missing profile:read).
  • Check that you call from one of the networks agreed with Anis.
  • Ask Anis staff to change either; the change applies to your next call.
  • On an order: refused before Anis looked at the order, so it says nothing about an earlier attempt with the same operation id. Restore access first, then resume the same id (or read it with GET /orders/{operationId}). Never place it again under a new id.

Where you can meet it

Example

The body of the refusal. Its type is the address of this page.

{
  "type": "https://developers.anis.ly/errors/insufficient-scope",
  "title": "Insufficient scope",
  "status": 403,
  "code": "insufficient_scope",
  "requestId": "01J9R2K8T4V6XQ0M3B7C5D9E1F"
}