Client error
HTTP 403: Forbidden
HTTP 403 means the server understood the request but refuses access.
Meaning
Authentication may exist, but the client is not allowed to perform this action.
Common causes
Permission rules, IP blocks, disabled accounts, or policy restrictions can cause it.
What to check
Check authorization rules, roles, resource ownership, and deny lists.
Example response
HTTP/1.1 403 ForbiddenReferences
- Registry
- IANA HTTP Status Code Registry
- Spec
- RFC 9110 §15.5.4
- Guide
- MDN 403 Forbidden
Related HTTP status codes
Nearby codes often answer the next debugging question.