hi,

I need help with the API

i am on Unraid 7.1.4

So i am trying to make some proof of concept stuff with the API and tinker with curl, but this doesn't work

curl --request POST \

--header 'content-type: application/json' \

--header 'x-api-key: XXXX' \

--url 'http://192.168.0.30/graphql' \

--data '{"query":"query Info {\n info {\n time\n }\n}"}'

always leads to

{"errors":[{"message":"Forbidden resource","locations":[{"line":2,"column":3}],"path":["info"],"extensions":{"code":"FORBIDDEN","originalError":{"message":"Forbidden resource","error":"Forbidden","statusCode":403}}}],"data":null}

Triple checked everything and tried many variations.

If i damage my token value on purpose i receive a 401 instead, so token is valid.
Tokens Permissions should also be okay to read this simple field: (also tried many other fields...nothing seems to work)
In Apollo / Playground the API is accessible.

--- Edit
It works with an api token with full admin permissions Role: Admin)

A readonly token (Role: Viewer) does not work.
---

Any ideas or hints?

Edited September 21, 2025Sep 21 by ingel81

22 hours ago, ingel81 said:

It works with an api token with full admin permissions Role: Admin)

A readonly token (Role: Viewer) does not work.

Same issue. Following this thread.

For the following query, only admin works.

query {
  array {
    state
  }
}

response

{
  "errors": [
    {
      "message": "Forbidden resource",
      "locations": [
        {
          "line": 3,
          "column": 3
        }
      ],
      "path": [
        "array"
      ],
      "extensions": {
        "code": "FORBIDDEN",
        "originalError": {
          "message": "Forbidden resource",
          "error": "Forbidden",
          "statusCode": 403
        }
      }
    }
  ],
  "data": null
}

Edited September 21, 2025Sep 21 by eeto