Skip to main content

Operator scope

typehttps://docs.frem.sh/reference/api/errors/operator-scope
HTTP status400 Bad Request

What it means

The token you asked to mint requested a scope from the operator half of the vocabulary — the operator: prefix.

Example detail messages returned with this error:

  • Scope {s} cannot be issued here.

What to do

Remove the operator: scope from the request. Operator scopes are not customer-obtainable: they authorise cross-tenant actions on the fremforge estate itself, they are held only by fremverk operators, and no tenant credential can carry one. This is enforced in three places, so there is no request shape that succeeds:

  • the wildcard * does not confer an operator scope, unlike every tenant scope;
  • token minting refuses them outright;
  • OAuth client registration rejects them, so you cannot register a client that later requests one.

If you believe you need an operator action — a refund, for example — that is an operator-side request, not something an API token can be given. Contact support rather than looking for a scope that grants it.

Response shape

All fremforge API errors are RFC 9457 problem+json:

{
  "type": "https://docs.frem.sh/reference/api/errors/operator-scope",
  "title": "Bad Request",
  "status": 400,
  "detail": "..."
}

Branch on type, not on title or detail - those are human-readable and may be reworded.

Operator managedOverage frozen