Restricted API keys are broken for the Responses API

API
1

The restricted API key creation UI at platform.openai.com only allows you to select “None”, “Read”, or “Write”. But it is currently broken when using the Responses API:

  1. Selecting “Write” and using the key results in a 401 error, stating that the key lacks the api.responses.read scope. One would assume that the write scope implies the read scope.
  2. Selecting “Read” and using the key also results in a 401 error, stating that the key lacks the api.responses.write scope. Which gets us back to square (1).

Resolution is to either have the write scope imply the read scope; or update your UI to allow selecting multiple scopes.

2 Likes