API error · HTTP 400

`invalid_scope`

Requested scope not granted to this client

HTTP status	400 Bad Request
`code`	`invalid_scope`
`title`	Requested scope not granted to this client
Retry?	No

What it means

The token request asked for a scope the credential does not hold. The token endpoint answers this as an OAuth error body ("error": "invalid_scope"), not as problem+json (§4.1).

What to do

Do not retry. Ask only for scopes the credential holds, or leave scope out to get all of them. To add a scope to the credential, contact WALT (§4.2).

Example response

Returned by the token endpoint (POST /v1/oauth/token) as an OAuth 2.0 error (RFC 6749 §5.2), not as problem+json:

HTTP

HTTP/1.1 400 Bad Request
Content-Type: application/json

{
  "error": "invalid_scope",
  "error_description": "Requested scope not granted to this client."
}

All error codes · Error catalogue in the integration guide (§15) · Error handling and retries (§12.4)