# INSUFFICIENT_SCOPE

> 403: the credential does not grant the scope this endpoint needs.

The token or key is valid, but the member did not grant the scope this endpoint needs.

## How to fix it

Read the scope in the `WWW-Authenticate` header (`scope="library:read"`) or in the
[reference](/developers/reference). For an OAuth app, send the member through the authorization again, asking for
that scope. For a personal key, create a key with that scope; a key's scopes cannot be changed after it is created.