In the Order and Position API, {"message": "forbidden."} implies that you don't have permission. I don't know why Alpaca returns the "forbidden" on the MarketData endpoint. It might be related to your account. I posted a question on Alpaca's dev-all Slack channel. If you use a Paper account, try to reset your account to see if that helps.
