loot.tools
403

Forbidden

4xx Client Error

The server understood the request but refuses to authorize it.

403 Forbidden means the server knows who you are and has decided you're not allowed. Unlike 401, sending credentials won't help if those credentials simply lack permission. Common causes are missing roles or scopes, file permissions on the server, an IP block, or a WAF rule. Retrying the same request as-is won't change the outcome.

About 4xx Client Error

The request has a problem the client needs to fix, like a bad URL, missing auth, or invalid input.

How to fix 403 Forbidden

  • Confirm the account or token actually has permission for this resource.
  • Check required scopes or roles on the API key.
  • On a static site, check file/directory permissions and index settings.
  • Rule out an IP block, firewall, or WAF rule rejecting the request.

Looking for a different one? See the full HTTP status code reference.