# 403 forbidden custom types api

**URL:** <https://community.prismic.io/t/403-forbidden-custom-types-api/9171>\
**Category:** Developing with Prismic\
**Tags:** custom-types-api\
**Created:** [February 24, 2022, 2:26pm UTC](https://community.prismic.io/t/403-forbidden-custom-types-api/9171 "2022-02-24T14:26:39Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![patrick.nueser](https://avatars.discourse-cdn.com/v4/letter/p/7ea924/32.png) [@patrick.nueser](https://community.prismic.io/u/patrick.nueser)\
**Post date:** [February 24, 2022, 2:26pm UTC](https://community.prismic.io/t/403-forbidden-custom-types-api/9171/1 "2022-02-24T14:26:39Z")

</div>

Hello, we receive a 403 forbidden from cloudfront when we try to access our customtypes api. Happy to provide more details privately (e.g. the token and repo name)

```auto
curl --location --request GET 'https://customtypes.prismic.io' \

--header 'repository: REPO_NAME' \

--header 'Content-Type: application/json' \

--header 'Accept: application/json' \

--header 'Authorization: Bearer <<BEARER TOKEN FROM Custom types api tab in settings>>I'

```

---

<div class="post-metadata">

**Author:** ![Pau](https://dub1.discourse-cdn.com/flex013/user_avatar/community.prismic.io/pau/32/5422_2.png) [@Pau](https://community.prismic.io/u/Pau)\
**Post date:** [February 25, 2022, 3:52pm UTC](https://community.prismic.io/t/403-forbidden-custom-types-api/9171/2 "2022-02-25T15:52:43Z")

</div>

Hello @patrick.nueser, welcome to the community. It seems like you haven’t passed a correct bearer token then. Can generate a new one in your repo and try again?

---

<div class="post-metadata">

**Author:** ![patrick.nueser](https://avatars.discourse-cdn.com/v4/letter/p/7ea924/32.png) [@patrick.nueser](https://community.prismic.io/u/patrick.nueser)\
**Post date:** [March 3, 2022, 4:31pm UTC](https://community.prismic.io/t/403-forbidden-custom-types-api/9171/5 "2022-03-03T16:31:38Z")

</div>

@Pau thanks for your reply. I created multiple tokens and all of them fail.

 ![grafik](https://europe1.discourse-cdn.com/flex013/uploads/prismic/original/2X/c/c4f3fd8fa0bbbb82d4311a56e83ba11da086b25a.png)

I use the copy to clipboard button to get the complete token ( I am using firefox)

---

<div class="post-metadata">

**Author:** ![Pau](https://dub1.discourse-cdn.com/flex013/user_avatar/community.prismic.io/pau/32/5422_2.png) [@Pau](https://community.prismic.io/u/Pau)\
**Post date:** [March 3, 2022, 4:52pm UTC](https://community.prismic.io/t/403-forbidden-custom-types-api/9171/7 "2022-03-03T16:52:59Z")

</div>

Could you try disabling the old ones, creating a new one and try again with the curl request using this format?

```auto
curl --location --request GET 'https://customtypes.prismic.io/customtypes' \
--header 'repository: tutorial-series' \
--header 'Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjVjM2M3MTAzMTEwMDAwMWYwMGExYTZhMiIsInR5cGUiOiJ1c2VyIiwiZGF0ZSI6MTYxMzczNTY2NzIxNSwiaWF0IjoxNjEzNzM1NjY3fQ.Ex18_cuNtHes69me4pHQGLpiQ-OUbi42-qFxkZCG-yw'

```

---

<div class="post-metadata">

**Author:** ![patrick.nueser](https://avatars.discourse-cdn.com/v4/letter/p/7ea924/32.png) [@patrick.nueser](https://community.prismic.io/u/patrick.nueser)\
**Post date:** [March 3, 2022, 4:56pm UTC](https://community.prismic.io/t/403-forbidden-custom-types-api/9171/8 "2022-03-03T16:56:30Z")

</div>

> [@Pau](#):
>
> `customtypes`

Got it. missed the `customtypes` part in the url 😊