forbidden

Plugin API error forbidden — API key lacks the required scope.

HTTP 403 · not retryable

Authentication succeeded, but the effective scope set (api key ∩ plugin installation) does not include the scope the endpoint requires.

Required scopes

Endpoint	Scope
`POST /jobs`, `POST /jobs/batch`	`plugin.jobs:create`
`GET /jobs`, `GET /jobs/{id}`, `GET /me`, `GET /presets`, `POST /jobs/{id}/refresh-url`	`plugin.jobs:read`
`DELETE /jobs/{id}`	`plugin.jobs:cancel`
`POST /assets/upload`	`plugin.assets:upload`
`POST /webhooks/{id}/replay`, `POST /installations/{id}/rotate-hmac`	`plugin.webhooks:manage` / `plugin.installations.manage`

How to fix

Re-issue the API key with the missing scope, or expand the installation's scope set in settings.
Remember the installation scopes upper-bound the key scopes — narrowing the installation also narrows every key tied to it.