Skip to main content

Scope escalation

typehttps://docs.frem.sh/reference/api/errors/scope-escalation
HTTP status403 Forbidden

What it means

The credential is valid but not permitted to do this.

Example detail messages returned with this error:

  • Cannot grant scope ‘{s}’ — issuer lacks it.

What to do

A token cannot mint another token with scopes it does not itself hold. Re-issue from a credential that has them.

Response shape

All fremforge API errors are RFC 9457 problem+json:

{
  "type": "https://docs.frem.sh/reference/api/errors/scope-escalation",
  "title": "Forbidden",
  "status": 403,
  "detail": "..."
}

Branch on type, not on title or detail - those are human-readable and may be reworded.