Based on the Forbidden error, off the top of my head, two things jump out at me.
• Is the API domain correct?
• Does your user have access to that org?
If you're using OSS the issue is the first one. You'll want to make requests to your own domain that hosts Airbyte, not
api.airbyte.com.