Skip to main content
Code: auth.keys.origin_not_allowed
HTTP: 403 Forbidden

What happened

The API rejected the request during authentication before your route handler ran.

Safe message

This action is not available from this application.
Use err.safeMessage or err.displayMessage in customer UI, not err.message.

Why this happened

The API key is restricted to specific allowed origins and the request origin is not on the allowlist.

How to fix it

Add the server origin to the key’s allowed domains in the dashboard, or call the API from an approved backend.

UI hint

Programmatic handling