scope_denied

Secret key used outside its dashboard-configured scope:

Status: HTTP 403 · Keys and domains

What happened

Secret key used outside its dashboard-configured scope:
  • A scoped key called a collection it wasn't given, tried to write when it may only read, or tried to delete when only "deletes too" would allow it. A full key reaches every collection, including ones added later.
  • A secret key asked to sign in as the account owner or an admin, or to link or sync. The CLI links and syncs after npx gemmein login, approved in the browser; npx gemmein sync --live asks for its own Live approval.
  • The Live push key (sync --live) asked for anything but relays and AI tools.
  • On g.ai.chat(): a secret key called it. g.ai.chat() is for the browser; a server calls the provider directly.

Read more

Was this page helpful?

Last updated