# `auth.endpoint_not_allowed` — Endpoint is not part of the public API

**HTTP status:** 403  
**Retryable:** no — change the request or the flow first

## When it happens

API keys can only call documented public endpoints under the public base URL.

## What to do

Check the path against the API reference.

## Example response

```json
{
  "type": "https://quickota.com/developers/errors/auth.endpoint_not_allowed",
  "title": "Endpoint is not part of the public API",
  "status": 403,
  "code": "auth.endpoint_not_allowed",
  "detail": "API keys can only call documented public endpoints under the public base URL.",
  "suggestion": "Check the path against the API reference.",
  "retryable": false,
  "requestId": "req_7f3a2c9e41d0b8a6c5e21f90"
}
```

See [Errors](https://quickota.com/developers/guides/errors) for how to handle errors in general.