POST /api/v2/conversations/calls returns 403 for outbound call

Trying to initiate an outbound call on behalf of an agent using the Conversations API. The endpoint is POST /api/v2/conversations/calls. I’ve got the right scopes on the token, but I’m hitting a 403 Forbidden. The payload is straightforward:

{
 "to": [{"phoneNumber": "+525512345678"}],
 "from": {"phoneNumber": "+525587654321"},
 "routing": {"type": "agent", "agentId": "abc-123"}
}

Any idea what’s missing here?