# ORIGIN_NOT_ALLOWED

- Surface: API
- HTTP status: 403
- Details: `{ origin: string, hint: string }`

## Cause

A valid Client Key was presented from an origin that is not on that key's allow-list.

## Fix

Add the origin in `details.origin` to the key's allow-list, or open the key. `details.hint` names the specific next step for the key's current state.

## Related

- [APP_MISMATCH](https://splitch.dev/docs/error/APP_MISMATCH)
- [UNAUTHORIZED](https://splitch.dev/docs/error/UNAUTHORIZED)

Source: https://splitch.dev/docs/error/ORIGIN_NOT_ALLOWED