# Get firmware api returns 403 \*\*SOLVED\*\*

**URL:** <https://discuss.blues.com/t/get-firmware-api-returns-403-solved/3263>\
**Category:** Notehub.io\
**Created:** [August 22, 2025, 2:28am UTC](https://discuss.blues.com/t/get-firmware-api-returns-403-solved/3263 "2025-08-22T02:28:22Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![gomario2](https://avatars.discourse-cdn.com/v4/letter/g/dfb087/32.png) [@gomario2](https://discuss.blues.com/u/gomario2)\
**Post date:** [August 22, 2025, 2:28am UTC](https://discuss.blues.com/t/get-firmware-api-returns-403-solved/3263/1 "2025-08-22T02:28:22Z")

</div>

Ignore , I fixed it!

When calling the firmware endpoint I’m getting this error:

(I removed my projectid)

{“err”:“The requested action was forbidden”,“code”:403,“status”:“Forbidden”,“request”:“/v1/projects//firmware”,“debug”:“denied access to identifier account:anonymous, resource blues:resources:app:3145:devices, actions read”}

I get the token using this:

curl -X GET -L ‘[https://api.notefile.net/v1/projects//firmware’](https://api.notefile.net/v1/projects//firmware%E2%80%99) -H ‘Authorization: Bearer ’

The token was obtained using  
curl -X POST -L ‘[https://notehub.io/oauth2/token’](https://notehub.io/oauth2/token%E2%80%99) -H ‘content-type: application/x-www-form-urlencoded’ -d grant\_type=client\_credentials -d client\_id= -d client\_secret=

I thought I was pro-Blues user – this should be easy, what am I doing wrong ???

Thanks!

_ **IGNORE - Started working , not sure why , but will ! my last command worked, so will compare and see what I did wrong!** _