OneDrive config 403 Forbidden

What is the problem you are having with rclone?

I'm trying to add OneDrive personal account. I can view my OneDrive in browser at https://onedrive.live.com/my

Run the command 'rclone version' and share the full output of the command.

rclone v1.75.0 - os/version: Microsoft Windows 11 Pro 25H2 25H2 (64 bit) - os/kernel: 10.0.26200.9168 (x86_64) - os/type: windows - os/arch: amd64 - go/version: go1.26.5 - go/linking: static - go/tags: cmount

Which cloud storage system are you using? (eg Google Drive)

Microsoft OneDrive - Tier 1

The command you were trying to run (eg rclone copy /tmp remote:tmp)

rclone config

A log from the command that you were trying to run with the -vv flag

https://gist.github.com/machsix/65c912a95f4e037f7499f7ae651c42a3#file-gistfile1-txt

welcome to the forum,

that log you posted, looks like just a partial snippet.
can you please post the full debug log into the forum?

I'm having the exact same problem as MachX.

full command used:

rclone config

'rclone version' output:

rclone v1.75.0
- os/version: arch (64 bit)
- os/kernel: 7.1.8-arch1-3 (x86_64)
- os/type: linux
- os/arch: amd64
- go/version: go1.26.5-X:nodwarf5
- go/linking: dynamic
- go/tags: none

full log with -vv flag:

https://rentry.org/t3cvixng

As far as I can tell, that is the full debug log, unless there's something else that can be done to generate even more verbose output than just -vv. You can see mine above, it's very similar.

I've also tried setting up the remote by getting my own Client ID and Key as outlined in https://rclone.org/onedrive/#creating-client-id-for-onedrive-personal, but the end result is the same (403 Forbidden). If needed, I can upload a log of that as well, but I'm not sure it'd be very useful since it's mostly very similar.

Almost forgot to mention that I tried swapping to Windows 10 (using rclone v1.75.0), but to no avail. While I was on Windows, I also tried v1.74.4, v1.73.5 and v1.72.1 of rclone, but all gave the same 403 Forbidden error.

I did some quick testing using v1.75.0

onedrive personal - cannot create a remote
onedrive business - can create a remote

so, perhaps this is an issue with ondrive personal only?

Did a test of my own. The issue is actually just with creating the remote through rclone. If you fill in the details in rclone.conf some other way, everything works perfectly fine.

In my case, I happened to already have AeroFTP configured. I found out that the program supports exporting your credentials to rclone (via making a rclone.conf file), so I gave it a shot. When I used this configuration file, everything works perfectly. I can see the folders/files in my OneDrive, and I did a test copy of a directory successfully.

Here's what my rclone.conf that AeroFTP created looks like:

# Generated by AeroFTP - https://aeroftp.app
# Exported: 2026-08-20T15:27:08Z

[onedrive]
type = onedrive
drive_id = {drive_id}
drive_type = personal
client_id = {client_id}
client_secret = {client_secret}
token = {"access_token":"{access_token}","expiry":"{expiry_date}","refresh_token":"{refresh_token}","token_type":"Bearer"}

Obviously I've had to redact pretty much everything, but the fields were filled as expected, with a client_id and client_secret from the OAuth2 app I created for use with AeroFTP. I used almost the same settings for the app as the rclone documentation suggests, except that I left out Sites.Read.All since it wasn't relevant to me.

The main thing is that AeroFTP got my drive_id, which I don't know how to get otherwise. https://rclone.org/onedrive/ only shows you how to get it for a Business account.

I guess this has sort of solved my problem, since I can now use rclone without any issues. Though it probably isn't ideal that setting up a (personal) OneDrive remote doesn't work through rclone itself and requires exporting credentials from a different program at the moment.

FYI. I can confirm your tests. The same here.

nice!

  • using aeroftp, when did you create the onedrive config?
  • i am curious if microsoft changed something with personal or if this is a rclone issue?
    using aeroftp, can you create, from scratch, a new account, not re-using credentials?

In addition.

rclone config fails the same as for OP but partial remote is created. With valid token.

Then I can add by hand missing fields:

drive_id = XXX
drive_type = personal

and all is fine.

Something is broken with rclone process for personal drives.

Actually, I configured AeroFTP after trying and failing to create a rclone remote. When I said that I "already [had] it configured", I meant in relation to rclone, which I couldn't configure successfully at all. Sorry for the confusion!

Because of that, I'm pretty confident that the error/issue isn't on OneDrive's end. Or if OneDrive did change something, AeroFTP's process has either been updated or still works, while rclone's doesn't.

How do you get the drive_id?

login to Graph Explorer | Try Microsoft Graph APIs - Microsoft Graph

Set permissions and "Run query" GET https://graph.microsoft.com/v1.0/me/drive

you will get something like:

{
  "id": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
  "driveType": "personal",
  "name": "OneDrive",
  ...
}

It looks like: