Every authenticated AI Gateway request from my team returns 403 {“error”:{“message”:“Forbidden.”,“type”:“access_denied”}}, including the auth-only /v1/credits endpoint. I purchased $10 in AI Gateway credits today and the balance shows 15.00 on the team, but access has not been restored.
The credentials are valid and being denied rather than rejected: a missing or fake key returns 401, while my project OIDC token and two separate freshly-created API keys all return 403. I have ruled out an expired token (refreshed via vercel env pull), wrong team (the OIDC token’s subject claim embeds the team and project, so it cannot be aimed elsewhere), provider and model (gpt-5.5, gpt-5.6-sol, claude-opus-5 and claude-haiku-4.5 all 403, all present in /v1/models), any model at all (/v1/credits takes no model parameter and still 403s, so the refusal precedes model routing), missing credits, an outdated CLI (upgraded to 58.4.4), and team-level blocks (blocked, softBlock and featureBlocks are all clear). GET /v2/teams/:id shows billing.entitlements as an empty object.
This looks like the same team-level entitlement state that several other users have reported this year and that your team has resolved manually — for example the thread “AI Gateway remains 403 access_denied after purchasing new credits”, which was marked solved a few days ago. Could someone from the AI Gateway team inspect this team and restore access?