The API answered with HTTP 403 and the error code no_access.
The workspace key is unknown, or the person who created the token cannot access that workspace. Both answer the same, so keys cannot be probed.
Every error is an RFC 9457 problem document (application/problem+json). Match on code, never on the message text. See errors for the full list.