HTTP 403
origin_rejected
What to do: Add the site origin to the Form allowed origins.
settings.allowed_origins restricts which sites may post and doubles as the CORS allowlist. The submission is stored as quarantined with reason origin_rejected.
Shape
{ "error": { "code": "origin_rejected", "message": "…", "hint": "Add the site origin to the Form allowed origins.", "docs": "https://postbag.dev/docs/errors/origin_rejected/" } } All codes are listed on the error reference. Conventions for the envelope, hints and next[] are in the API overview.