Feature/add node api

would be more accurate to return a forbidden status since this exception indicates the account cant access the resource