# dns_provider_permission_missing

The API token cannot edit DNS records for this domain.

## What it means

The token is valid, but it can only read DNS for this domain, or has no DNS permission at all.

## Why it happens

- The token was created from a read-only template.
- The permission is Zone → DNS → Read instead of Edit.

## What to do

1. Create a new token with Zone → DNS → **Edit** (the **Edit zone DNS** template) for this domain.
2. Paste it on the connect page again.

- [Connect page](/docs/connect-page)
- [Embed the connect flow](/docs/guides/embed-connect)

## In the API

```
HTTP 403

{
  "error": {
    "code": "dns_provider_permission_missing",
    "message": "The API token cannot edit DNS records for this domain.",
    "fix": "Create a token with the Edit zone DNS permission for this domain and paste it again.",
    "docs": "https://docs.apexly.dev/errors/dns_provider_permission_missing"
  }
}
```