EMBED_SCOPE_NOT_ALLOWED

Scope not allowed in an embed session

HTTP status 403 Forbidden, code EMBED_SCOPE_NOT_ALLOWED.

What it means#

You asked POST /embed/sessions for a scope no embed session may carry, even though the organisation API key holds it. Today that is paymentproviders.accounts.write: pointing an account's payments at a Stripe connected account is a decision for your server, not for a widget in a browser.

What to do#

Leave the scope out of the session request (a session that names no scopes gets every scope of the key that it may carry), and make that change from your server with the organisation API key.

On the wire#

Every error response carrying this code names this page in error.moreInfo, with the request id in the query string. See Error codes for the response shape and the list of every code.