Why did I get API error code 10007 or a PERMISSION_DENIED response?

For the NVP/SOAP API 10007 error, the call failed for one of these reasons:

• The wrong transaction ID was used.
• The wrong email address is being passed in the ‘subject’ for a third-party API call.
• The subject account hasn't given you permission to make the third-party call.
• The bank in your PayPal account is not verified.
• In the case of Authorization API calls, if there is already an outstanding order authorization or a recorded capture associated with this transaction, it cannot be moved.

Verify your code to ensure you are only using supported parameters for this operation. See NVP Operations.

If you are using our REST API integration stack, the call failed for one of these reasons: 

• The third-party platform you are using to make API calls on your behalf has not been granted proper permissions. See Grant a third party permissions. 
• The live REST application you are using does not have the appropriate features enabled. Contact Merchant Technical Support to validate the needed features. 

PayPal NVP and SOAP API Reference Guides.

See the Developer Portal for a complete list of NVP/SOAP API error codes.