n8n: Forbidden - perhaps check your credentials
Last verified
Forbidden - perhaps check your credentialsWhat it means
n8n shows this when the service returned HTTP 403. The n8n docs explain it as authentication failing or the credential lacking permission for the operation. The request reached the right endpoint, but the service refused it for this credential.
Most often the credential is valid but under-scoped: an OAuth app missing a scope, an API key with read-only rights used for a write, or a user without access to a specific resource. Sometimes the generic credential type in n8n does not send the header in the format the API expects. When n8n calls a website rather than an API, a 403 can also be the site's bot protection; see HTTP 403.
What is not wrong: the URL and usually the request body.
What it looks like
Forbidden - perhaps check your credentials
errorDetails: { "httpCode": "403" }Why it happens
- The token or key lacks the scope or permission for this operation.
- The connected user has no access to the specific resource (sheet, channel, repository).
- The generic credential sends authentication in the wrong format.
- The API key was revoked or regenerated.
- A website's firewall blocks the n8n server.
How to fix it
- Read the service's response body in the error details for the specific permission.
- Add the missing scopes or permissions in the service's app settings and reconnect the credential.
- Check that the connected user can access the resource.
- Verify the authentication format (header name, Bearer prefix) against the API docs.
- Generate a new key or token if the current one may be revoked.
How to stop it recurring
Create credentials with the documented scopes for each operation, use service accounts that own the resources, and test credentials after changing permissions.
Official documentation: docs.n8n.io/integrations/builtin/core-nodes/n8n-nodes-base.httprequest/common-issues. See all n8n error messages or the n8n limits and quotas.
Related errors
Definitions
Quick answers
What does "Forbidden - perhaps check your credentials" mean in n8n?
n8n shows this when the service returned HTTP 403. The n8n docs explain it as authentication failing or the credential lacking permission for the operation. The request reached the right endpoint, but the service refused it for this credential.
How do I fix "Forbidden - perhaps check your credentials"?
1. Read the service's response body in the error details for the specific permission. 2. Add the missing scopes or permissions in the service's app settings and reconnect the credential. 3. Check that the connected user can access the resource. 4. Verify the authentication format (header name, Bearer prefix) against the API docs. 5. Generate a new key or token if the current one may be revoked.
Error handling you can see in the workflow
Autonoly workflows have per-node retries, timeouts, continue-on-fail and error-handler branches, so a failing step can be retried or routed instead of stopping the whole run. Saved workflows have no loop node; lists are worked through by the AI agent or one run per trigger item.
Also see Visual workflow builder.