---
title: "HubSpot Error: 403 Forbidden Missing Scopes"
description: "HubSpot Error: 403 Forbidden Missing Scopes"
keywords: "HubSpot Error: 403 Forbidden Missing Scopes HubSpot permissions object access"
url: "https://myrapidi.com/wiki/hubspot_error_403_forbidden_missing_scopes"
locale: "en"
published: "2026-07-28T16:09:09Z"
modified: "2026-07-28T16:09:09Z"
---

A transfer to HubSpot can fail with a 403 and a `MISSING_SCOPES` error even when the operation and data are otherwise correct. This can mean either that our app truly lacks the scope, or that the authorizing HubSpot user doesn't have the right permission level for that object - the error looks identical either way. This article shows how to tell the two apart and resolve each.

## Example

**Connection:** HUBSPOT001

**Data sent:**

json

```
{ "inputs": [{ "id": "25669941041", "properties": { "bc_item_no": "ITEM0071" } }] }
```

**Status code:** `403 Forbidden`

**Response body:**

```
{  "status": "error",  "message": "This app hasn't been granted all required scopes to make this call...",  "errors": [    { "message": "One or more of the following scopes are required.",      "context": { "requiredGranularScopes": ["e-commerce", "crm.objects.products.write"] } }  ],  "category": "MISSING_SCOPES"}
```

## What to check first

Look at the object named in `requiredGranularScopes` (here: Products) and check whether it's part of our standard supported objects list.

### Case 1 - Object is already in our supported list

The app has the scope - Check this [Supported HubSpot Objects](https://myrapidi.com/wiki/supported_hubspot_objects.md) page for more information. This is a **user permission issue** : the HubSpot user who authorized the connection most likely has **read-only** access to that object, not write.

**Fix:**

1. Ask the customer's HubSpot admin to check the authorizing user's permissions for that object.
2. Grant write access (not just read) if that's what's missing.
3. Re-authorize the connection so the change takes effect.
4. Re-run the transfer.

### Case 2 - Object is NOT in our supported list

The app itself doesn't have the scope at all.

**Fix:**

1. Confirm the authorizing user already has access to that object in HubSpot.
2. If yes, reach out to Rapidi to add the missing scope(s) to the app.
3. Once added, re-authorize the connection and re-run the transfer.