# INSUFFICIENT_SCOPE

This connection is not allowed to do that.

- **HTTP class:** 403
- **Retryable:** no

## What happened

The connection's token lacks the permission the tool needs: `sites:write` for `carnival_deploy`, `sites:read` for `carnival_status` and `carnival_logs`. An OAuth connection gets an HTTP 403 from the transport instead of this result.

## Fix

Don't retry. Ask the user to reconnect Carnival and allow publishing on the consent screen.

## What to tell the user

This connection isn't allowed to publish; reconnecting Carnival and allowing publishing fixes it.

## Agent hint

The exact `error.hint` text; Carnival fills each `<…>` for the call.

```text
This connection can't do that. Ask the user to reconnect Carnival and allow publishing.
```

## Related

- [`UNAUTHORIZED`](https://carnival-staging.dev/docs/errors/UNAUTHORIZED.md): This connection is no longer valid.

All error codes: [error codes](https://carnival-staging.dev/docs/errors.md)