403 — Forbidden (origin, IP or scope)

403 Forbidden

The key was recognised but isn't allowed to access this.

Public key (browser):

• "Public-nøgle uden tilladte origins kan ikke bruges fra browser." → add allowed origins.
• "Public-nøgle kræver en Origin-header fra browseren." → the call must come from a browser.
• "Origin '…' er ikke på allowlisten for denne nøgle" → add the domain to the key.

IP allowlist:

• "Din IP er ikke på nøglens IP-allowlist." → add your server IP, or remove the IP lock.

Scope:

• "API-nøglen mangler scope '…' til dette endpoint. Opdatér nøglen i dashboardet." → grant the key the scope.

Control plane:

• "Dette endpoint kræver en server-side (live) API-nøgle…" → use a live_ key (not pub_).

If the 403 is about the PLAN (batch/stats/replication), see "403 — Requires Pro/Enterprise".