We are using the responses API with a file search tool and our system, that was working well, has suddenly started throwing 401 errors quoting a missing vector_store.write scope. We use a restricted API key however permissions have not changed within the last month.
I am able to produce a minimal reproduction using CURL.
curl https://api.openai.com/v1/vector_stores \
-H "Authorization: Bearer $OPENAI_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"name": "Support FAQ"
}'
If I create an API key with permissions ‘All’ and make the request, the request succeeds.
If I create an API key with permissions ‘Restricted’, but every single permission enabled (set to write), the request fails with the following error:
{
"error": {
"message": "You have insufficient permissions for this operation. Missing scopes: vector_store.write. Check that you have the correct role in your organization (Reader, Writer, Owner) and project (Member, Owner), and if you're using a restricted API key, that it has the necessary scopes.",
"type": "invalid_request_error",
"param": null,
"code": null
}
}
How can it be that this has changed? Is anyone else experiencing this?