Step-up required

What it means

The request would loosen one of the organisation’s security settings, and that is done by an owner in the console, not over the API. The API refuses the request and changes nothing. Tightening the same setting works over the API.

What to do

Ask an owner of the organisation to make the change in the console, at the page the detail names. An AI agent or a bench credential cannot make these changes for anyone.

Response shape

All fremforge API errors are RFC 9457 problem+json:

{
  "type": "https://docs.frem.sh/reference/api/errors/step-up-required",
  "title": "Forbidden",
  "status": 403,
  "detail": "..."
}

Branch on type, not on title or detail - those are human-readable and may be reworded.