API key scopes not being respected #26642
Description
Describe the problem/error/question
Hi! I have an API key with the scopes execution:read and workflow:read. I am using it to pull analytics into a dashboard. However, I am now getting a "forbidden" error when i try to use it. I have heard that sometimes the scopes that are assigned may look assigned in the website but not actually be reflected on the back end. I am wondering if that is my issue. I have tried deleting and recreating the key. Nothing seems to work
What is the error message (if any)?
"forbidden" - I am not sure if it's 401 or 403
Please share your workflow/screenshots/recording
(Select the nodes on your canvas and use the keyboard shortcuts CMD+C/CTRL+C and CMD+V/CTRL+V to copy and paste the workflow.)
⚠️ WARNING ⚠️ If you have sensitive data in your workflow (like API keys), please remove it before sharing.
Share the output returned by the last node
Debug info
core
- n8nVersion: 2.9.3
- platform: docker (cloud)
- nodeJsVersion: 24.13.1
- nodeEnv: production
- database: sqlite
- executionMode: regular
- concurrency: 200
- license: enterprise (production)
storage
- success: all
- error: all
- progress: false
- manual: true
- binaryMode: filesystem
pruning
- enabled: true
- maxAge: 720 hours
- maxCount: 25000 executions
client
- userAgent: mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/537.36 (khtml, like gecko) chrome/145.0.0.0 safari/537.36
- isTouchDevice: false
Generated at: 2026-03-05T21:50:22.177Z}