Insufficient scope

insufficient_scope HTTP 403

The key does not hold the scope this endpoint requires. The response carries a required_scope member naming exactly what is missing, and GET /v1/me lists what the key does hold. Scopes are fixed when a key is issued — a company admin issues a new key with the additional scope; they are not granted after the fact.

How to react to this in code

Switch on the code member — insufficient_scope — which is stable. Do not parse the type URI: it points here, and where "here" is may change.