POST responses should have a 403 forbidden HTTP status code, communicating that consumers are not allowed to access
OpenAPI Response Post 403 Status Code Error
Message: POST Responses Has 403 Status Codes
Policies
Response 4xx
Client error responses are where developer experience lives or dies. Consistent 400, 401, 403, 404, and 429 responses with shared schema references make error handling predictable.