# insufficient_scope (HTTP 403)

insufficient_scope (HTTP 403) from the GetItDone API: The credential is valid but was not granted a scope this operation requires.

- **HTTP status:** 403
- **Problem type URI:** https://nowgetitdone.com/docs/api/problems/insufficient-scope

## What it means

The credential is valid but was not granted a scope this operation requires.

## Likely causes

- The API key was minted without the needed scope (e.g. `tasks:write`).
- An OAuth grant requested read scopes only, then attempted a write.

## How to fix

- Re-mint the API key with the scopes the operation lists under “Required scopes”.
- For OAuth, request the missing scope during authorization.

## Example problem+json

```json
{
    "type": "https://nowgetitdone.com/docs/api/problems/insufficient-scope",
    "title": "Insufficient scope",
    "status": 403,
    "code": "insufficient_scope",
    "request_id": "req_a1b2c3d4"
}
```

## Related

- [Authentication](/docs/api#authentication)