Skip to content

Forbidden

Understand the SumUp API Forbidden response, common causes, and example payload for requests blocked by permissions.

Indicates that the server understood the request but refuses to authorize it.

  • The merchant account is not permitted to perform this action.
  • The resource belongs to another merchant or app.
  • The operation is blocked due to compliance or risk checks.
{
"error_message": "request_not_allowed",
"error_code": "FORBIDDEN",
"status_code": 403
}