Forbidden (forbidden)

HTTP 403Horizon RFC 7807 ProblemCode: forbidden

Type URI: https://orion.stellarchain.io/horizon-errors/forbidden

The client is not authorized to access the requested resource.

Quick Fix & Resolution

Verify the endpoint URL and any required Authorization or Origin headers.

Response Payload & SDK Handling

RFC 7807 JSON Response

{
  "type": "https://orion.stellarchain.io/horizon-errors/forbidden",
  "title": "Forbidden",
  "status": 403,
  "detail": "You are not authorized to access this resource."
}

TypeScript (@stellar/stellar-sdk)

import { Horizon } from '@stellar/stellar-sdk';

const server = new Horizon.Server('https://pubnet.stellarchain.io');

try {
  const res = await server.ledgers().limit(10).call();
} catch (err: any) {
  const problem = err?.response?.data;
  if (problem?.type === 'https://orion.stellarchain.io/horizon-errors/forbidden') {
    console.error('[forbidden] HTTP 403:', problem.detail, problem.extras);
  }
}

Go (horizonclient)

client := &horizonclient.Client{
    HorizonURL: "https://pubnet.stellarchain.io",
}
_, err := client.Root()
if hErr := horizonclient.GetError(err); hErr != nil {
    if hErr.Problem.Status == 403 {
        log.Printf("Problem (%s): %s - extras=%v", hErr.Problem.Type, hErr.Problem.Detail, hErr.Problem.Extras)
    }
}

cURL Diagnostic

curl -i -s "https://pubnet.stellarchain.io/" \
  -H "Accept: application/hal+json"

Common Root Causes

• Missing or invalid authentication credentials on protected administrative or write endpoints.
• WAF or origin restriction policy blocked the request.

---

← Back to All 23 Horizon Error Codes