CHW-1920 APIKeyScopeForbidden
requested scope exceeds your current permissions; you can only mint a key whose permissions you already hold
Copies the raw Markdown source of this guide, for pasting into an LLM or notes.
Default message: requested scope exceeds your current permissions; you can only mint a key whose permissions you already hold
HTTP status:403(client)
Problem. Caller attempted to mint a key whose scope includes a permission the caller does not currently hold. Cause. The subset check at mint time blocks scope escalation; this branch fires when the requested permissions are not all present in the caller’s own role. Fix. Mint the key from a role that already holds the desired permissions, or have an admin grant the missing permission to the caller before retrying. HTTP 403.