# `auth.insufficient_scope` — Key lacks the required permission

**HTTP status:** 403  
**Retryable:** no — change the request or the flow first

## When it happens

The key does not carry the scope this endpoint needs (for example `flights:book` to create bookings).

## What to do

Edit the key in the panel and add the scope named in `context.requiredScope`, or use a key that has it.

## Example response

```json
{
  "type": "https://quickota.com/developers/errors/auth.insufficient_scope",
  "title": "Key lacks the required permission",
  "status": 403,
  "code": "auth.insufficient_scope",
  "detail": "The key does not carry the scope this endpoint needs (for example \u0060flights:book\u0060 to create bookings).",
  "suggestion": "Edit the key in the panel and add the scope named in \u0060context.requiredScope\u0060, or use a key that has it.",
  "retryable": false,
  "requestId": "req_7f3a2c9e41d0b8a6c5e21f90"
}
```

See [Errors](https://quickota.com/developers/guides/errors) for how to handle errors in general.