403 — Forbidden (origin, IP or scope)

403 Forbidden

The key was recognised but isn't allowed to access this.

Public key (browser):

• "Public-nøgle uden tilladte origins kan ikke bruges fra browser." → add allowed origins.
• "Public-nøgle kræver en Origin-header fra browseren." → the call must come from a browser.
• "Origin '…' er ikke på allowlisten for denne nøgle" → add the domain to the key.
• "'…' kan ikke kaldes med en public-nøgle. Brug en server-side (live) nøgle." → batch, statistics and replication need a live key from your server.

IP allowlist:

• "Din IP er ikke på nøglens IP-allowlist." → add your server IP, or remove the IP lock.

Scope:

• "API-nøglen mangler scope '…' til dette endpoint. Opdatér nøglen i dashboardet." → grant the key the scope.

Control plane:

• "Dette endpoint kræver en server-side (live) API-nøgle…" → use an sk_live_ key (not sk_pub_).

Account:

• "Kontoen er ikke aktiv." (The account is not active) → the account is suspended or closed; contact support.

If the 403 is about the PLAN ("'…' kræver Pro-plan" for batch/stats, Enterprise for replication), see "403 — Requires Pro/Enterprise".