error 403: access_denied
The rejections builders actually hit, with the exact fix.
Pick your platform or your error message. Each guide explains why the rejection happens, shows the concrete fix, and links the Google requirement it satisfies — so you can verify every step before you resubmit.
Start here — by platform
The “Google hasn't verified this app” screen, diagnosed for the tool you built with.
- “Google hasn't verified this app”Fix “Google hasn't verified this app” on LovableLovable
- “Google hasn't verified this app”Fix “Google hasn't verified this app” on BoltBolt
- “Google hasn't verified this app”Fix “Google hasn't verified this app” on ReplitReplit
- “Google hasn't verified this app”Fix “Google hasn't verified this app” on v0 (Vercel)v0
- “Google hasn't verified this app”Fix “Google hasn't verified this app” on CursorCursor
“Homepage URL is unresponsive”
The one rejection only a builder can fix — your homepage renders for you but not for Google's crawler.
Common rejections
Domain ownership, privacy policy, branding, publishing status, Limited Use, and the demo video.
- “Domain ownership could not be verified”Custom domain vs platform subdomain for Google OAuth verificationAll platforms
- “Privacy policy does not meet our requirements”Privacy policy must be on the same domain — Google OAuthAll platforms
- “The app name does not match the branding on your website”App name does not match on the Google OAuth consent screenAll platforms
- “Access blocked: this app has not completed the Google verification process”Publish your app to production to fix 7-day logins and the 100-user capAll platforms
- “Your app does not comply with the Limited Use requirements”AI app rejected over Google user data — the Limited Use fixAll platforms
- “The demo video does not show the required information”Google OAuth demo video rejected — how to fix itAll platforms
Scopes & data
Justify each sensitive scope the way reviewers want — and know when to switch to a narrower one.
- “Justification for the requested scope is insufficient”Justify the Google Calendar scope for OAuth verificationAll platforms
- “Justification for the requested scope is insufficient”Justify the Google Contacts scope for OAuth verificationAll platforms
- “Justification for the requested scope is insufficient”Justify Google Sheets / Docs scope (or use drive.file instead)All platforms
- “Justification for the requested scope is insufficient”Justify the gmail.send scope for OAuth verificationAll platforms
- “Your app requests restricted scopes”Requesting full Gmail or Drive? Why you need a CASA assessmentAll platforms