HTTP 403 Forbidden — Meaning
403 Forbidden means the client is authenticated but lacks permission for the resource. Causes include insufficient ACL/roles, IP restrictions, or invalid CSRF token. Retrying won't help.
Open the interactive DevRef Hub tool →Key facts
| Status code | 403 |
|---|---|
| Class | 4xx Client error |
| Response example | HTTP/1.1 403 Forbidden |
| Spec | RFC 9110 §15.5.4 |
Frequently asked questions
What does 403 mean?
You are authenticated but not allowed to access the resource.
Will retrying fix a 403?
No. Permissions must change; retrying the same request won't help.
Related pages
HTTP 403 Forbidden is part of DevRef Hub on GOAT Lab — a free reference you can use without signing up, and it works offline. Open the tool above for any custom value.
Part of GOAT Lab — 26 free, browser-based science, engineering and developer tools. No sign-up.