permission_denied

HTTP status: 403

Your token is valid, but it doesn't have the scope required for this operation.

Why this happens

• The token was created with a restricted scope set (e.g., prequalify only) and you are calling an endpoint outside that set.
• You are using a read-only token on a mutating endpoint.
• The operation requires a higher-privilege token than the one in use.

What to do

1. Check the detail field — it names the specific scope that was missing.
2. Generate a new token with the required scope:
   • Go to dashboard.isaapi.com
   • API Keys → New token
   • Select the required scopes and save
3. Update your deployment environment with the new token.
4. If you believe your token should have this scope and it does not, contact [email protected].

Example response

{
  "type": "https://zyins.isaapi.com/errors/permission-denied",
  "title": "Permission denied",
  "status": 403,
  "detail": "This token does not have the 'quote' scope. Generate a new token with the required scope from the Dashboard.",
  "code": "permission_denied",
  "advice_code": "generate_scoped_token",
  "param": null,
  "request_id": "req_01HZK2N5GQR9T8X4B6FJW3Y1AS"
}

SDK exceptions

See also

• Error catalog
• Token scopes
• Authentication guide