# API GET Request | Access to the requested resource is forbidden

**URL:** <https://forum.sierrawireless.com/t/api-get-request-access-to-the-requested-resource-is-forbidden/22471>\
**Category:** Uncategorized\
**Created:** [December 29, 2020, 12:30pm UTC](https://forum.sierrawireless.com/t/api-get-request-access-to-the-requested-resource-is-forbidden/22471 "2020-12-29T12:30:04Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![oliners](https://avatars.discourse-cdn.com/v4/letter/o/cab0a1/32.png) [@oliners](https://forum.sierrawireless.com/u/oliners)\
**Post date:** [December 29, 2020, 12:30pm UTC](https://forum.sierrawireless.com/t/api-get-request-access-to-the-requested-resource-is-forbidden/22471/1 "2020-12-29T12:30:04Z")

</div>

Hello,  
when I am trying to integrate with the API, I am running in to some problems.  
Both when i use CURL and get requests in python I get the following error:

{‘head’: {‘status’: 403, ‘ok’: False, ‘messages’: , ‘errors’: [‘Access to the requested resource is forbidden. Invalid User or Token’], ‘references’: {}}, ‘body’: {}}

My code looks like this (with XXXX and company\_name filled out):

import requests

URL = “[https://octave-api.sierrawireless.io/v5.0/](https://octave-api.sierrawireless.io/v5.0/)\<COMPANY\_NAME\>/device/?only=id,name”

user = ‘XXXX’  
token = ‘XXXX’

PARAMS = {‘X-Auth-User’:user, ‘X-Auth-Token’: token}

r = requests.get(url = URL, params = PARAMS)

data = r.json()

print(data)

---

<div class="post-metadata">

**Author:** ![Donald](https://avatars.discourse-cdn.com/v4/letter/d/ac8455/32.png) [@Donald](https://forum.sierrawireless.com/u/Donald)\
**Post date:** [December 30, 2020, 4:51am UTC](https://forum.sierrawireless.com/t/api-get-request-access-to-the-requested-resource-is-forbidden/22471/2 "2020-12-30T04:51:48Z")

</div>

Hi @oliners

Please try with:

curl [[https://octave-api.sierrawireless.io/v5.0/my\_company/device/my\_device\_id](https://octave-api.sierrawireless.io/v5.0/my_company/device/my_device_id)] -H “X-Auth-User: xxx” -H “X-Auth-Token: xxx”

Help to tick “Solutions” if your question is answered.

---

<div class="post-metadata">

**Author:** ![oliners](https://avatars.discourse-cdn.com/v4/letter/o/cab0a1/32.png) [@oliners](https://forum.sierrawireless.com/u/oliners)\
**Post date:** [December 30, 2020, 6:50pm UTC](https://forum.sierrawireless.com/t/api-get-request-access-to-the-requested-resource-is-forbidden/22471/3 "2020-12-30T18:50:13Z")

</div>

Hi, thank you for your answer, but it is still not working for me.  
I still get the following response : curl: (6) Could not resolve host

Do you knwo what this could be?

---

<div class="post-metadata">

**Author:** ![Donald](https://avatars.discourse-cdn.com/v4/letter/d/ac8455/32.png) [@Donald](https://forum.sierrawireless.com/u/Donald)\
**Post date:** [December 31, 2020, 7:53am UTC](https://forum.sierrawireless.com/t/api-get-request-access-to-the-requested-resource-is-forbidden/22471/4 "2020-12-31T07:53:33Z")

</div>

Hi @oliners

> [@oliners](#):
>
> URL = “[https://octave-api.sierrawireless.io/v5.0/](https://octave-api.sierrawireless.io/v5.0/)\<COMPANY\_NAME\>/device/?only=id,name”

You are missing the device id parameter.

It works for me. I just hide sensitive information about user, token, company name and device ID.

import requests

url = “[https://octave-api.sierrawireless.io/v5.0/COMPANY\_NAME/device/DEVICE\_ID/?only=id,name](https://octave-api.sierrawireless.io/v5.0/COMPANY_NAME/device/DEVICE_ID/?only=id,name)”

payload = {}

headers = {

‘X-Auth-User’: ‘xxx’,

‘X-Auth-Token’: ‘xxx’

}

response = requests.request(“GET”, url, headers=headers, data = payload)

print(response.text.encode(‘utf8’))

Please help to tick “Solutions” if your question is answered.
