# \[URGENT\] POST /rest/v2/contracts returns 403 TOKEN\_TYPE\_NOT\_ALLOWED with personal API token (contracts:write)

**URL:** <https://stack.deel.com/t/urgent-post-rest-v2-contracts-returns-403-token-type-not-allowed-with-personal-api-token-contracts-write/532>\
**Category:** Bug Reports\
**Created:** [June 1, 2026, 4:21pm UTC](https://stack.deel.com/t/urgent-post-rest-v2-contracts-returns-403-token-type-not-allowed-with-personal-api-token-contracts-write/532 "2026-06-01T16:21:03Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![tundx0](https://avatars.discourse-cdn.com/v4/letter/t/258eb7/32.png) [@tundx0](https://stack.deel.com/u/tundx0)\
**Post date:** [June 1, 2026, 4:21pm UTC](https://stack.deel.com/t/urgent-post-rest-v2-contracts-returns-403-token-type-not-allowed-with-personal-api-token-contracts-write/532/1 "2026-06-01T16:21:03Z")

</div>

**Summary**

When we create a contractor contract via `POST /rest/v2/contracts` using a **personal** API token with `contracts:write` (and related scopes), Deel responds with **HTTP 403** and error code **`TOKEN_TYPE_NOT_ALLOWED`** / message **“Invalid token type for this endpoint”**. The personal API token has the correct scopes enabled.

Example Request

POST [https://api.letsdeel.com/rest/v2/contracts](https://api.letsdeel.com/rest/v2/contracts)

Content-Type: application/json

Accept: application/json

Authorization: Bearer \<personal\_token\_redacted\>

Body –

```auto
{
  "data": {
    "title": "<contractor name>",
    "country_code": "US",
    "state_code": "<state>",
    "scope_of_work": "As described",
    "special_clause": "",
    "client": {
      "legal_entity": { "id": "<legal_entity_id>" },
      "team": { "id": "<team_id>" }
    },
    "job_title": { "name": "Software Developer" },
    "notice_period": 10,
    "who_reports": "client",
    "meta": { "documents_required": true },
    "worker": {
      "expected_email": "<provider@email.com>",
      "first_name": "<first>",
      "last_name": "<last>"
    },
    "type": "pay_as_you_go_time_based",
    "start_date": "YYYY-MM-DD",
    "compensation_details": {
      "amount": 30,
      "currency_code": "USD",
      "frequency": "semimonthly",
      "cycle_end": 15,
      "cycle_end_type": "DAY_OF_MONTH",
      "payment_due_type": "REGULAR",
      "payment_due_days": 0,
      "pay_before_weekends": false,
      "scale": "hourly"
    }
  }

```

## **Actual response**

**HTTP status:** `403`

**Response body (example)**

```auto
{

"request": {

"method": "POST",

"url": "/rest/contracts",

"status": 403,

"api_req_id": "<api_req_id>",

"docs": "no match",

"source": "rest"

},

"errors": [

{

"message": "Invalid token type for this endpoint",

"code": "TOKEN_TYPE_NOT_ALLOWED"

}

]

}

```

Please investigate using **`api_req_id` from the error response:**

`864b4475ce3f67749e98cfdd3925c5e3`