Skip to main content

FSTL002 - Fastly Authorization Failed

Agent error code #FSTL002 indicates the API token authenticated but is not allowed to act on the configured service (HTTP 403).

The Knoc wizard's Validate connection step reads the token's own record, so a read-only token is reported here rather than at the first grant. Fastly does not return a scope for every credential, and where it cannot the check is skipped.

Common causes include:

  • The token's scope is global:read (read-only) or a purge-only scope, so it cannot write ACL entries
  • The token is limited to a set of services that does not include this one
  • The user behind the token lacks the engineer or superuser role

Steps to Resolve

  1. In the Fastly control panel, open Account > API tokens and check the token's scope and service list
  2. Create a token with write access to the service that carries the ACL, then update the Knocknoc backend configuration
  3. Confirm the Service ID on the Knoc names the service the token can reach
Back to top