Forbidden

What it means

The credential is valid, but it may not perform this operation.

Common causes

• The operation is limited to another kind of principal, such as Tobie operators.
• Your role at the employer does not include this action.

What to do

Do not retry. Call GET /v1/meta to see what this credential can do, and ask an admin if you need more access.

Retry: only after a fix. The same request fails the same way until you change the request, the credential or the resource.

Over MCP, the same failure is a tool result with isError: true, the code forbidden and retryable: false.

Example

A response body for this problem. The detail and instance vary with the request.

{
  "type": "https://api.tobie.team/problems/forbidden",
  "title": "Forbidden",
  "status": 403,
  "detail": "This credential may not perform this operation",
  "code": "forbidden",
  "instance": "/v1/tasks",
  "requestId": "01JC0S7Z5F3X9QK2M4N6P8R0TV"
}