forbidden — Action not allowed

What the API returns

{
  "error": {
    "code": "forbidden",
    "message": "You are not allowed to perform this action.",
    "request_id": "req_01JRQ8F4X9N2K7YB3C5V6W8H0T"
  }
}

Every Wapito error is this one envelope. Branch on code, which is stable; message is written for people and can be reworded; details appears only when there is something specific to say; request_id is what to quote to support.

Why it happens

Your credential is valid but the action is not permitted. In practice this is almost always a WhatsApp-side permission rather than a Wapito one: the linked number is not an admin of the group it is trying to modify, is not the owner of the channel it is trying to post to, or is trying to touch a resource that belongs to a different channel entirely. The details.reason field names which of those applies.

The same failure in other stacks

If you are moving from a library or a self-hosted gateway, this is the same failure under the name that stack gives it:

• forbidden
• not-authorized

Endpoints that raise it

• PATCH /groups/{id}/settingsChange group security settings
• POST /groups/{id}/adminsPromote participants to admin
• POST /groups/{id}/participantsAdd participants to a group
• DELETE /groups/{id}/participants/{pid}Remove a participant from a group
• DELETE /newsletters/{id}Delete a WhatsApp Channel
  Beta

Where you will meet it

• Group Admins

  Feature guide

Retry guidance

Frequently asked questions

Related