Hello Vercel team,
The official support form directed this Vercel MCP beta issue to the Community.
An existing ChatGPT connection owned by Vercel MCP returns 403 forbidden for POST /v11/projects: "You don't have permission to create the project."
Verified context:
- The connected user is a confirmed team Owner on Hobby.
- Account Settings > Sign in with Vercel > ChatGPT displays project read/write, deployment read/write, and team-data read permissions.
- Official team-access consent was completed. The subsequent create request still returned 403.
- The request specified the explicit team ID and only a new project name, framework: null, publicSource: false, and ssoProtection: { deploymentType: "all" }. There was no Git connection or environment variable payload.
- A subsequent lookup returned 404. No project or deployment was created.
The Help AI suggested that All Deployments protection requires a paid plan. However, the current Deployment Protection documentation (https://vercel.com/docs/deployment-protection#all-deployments) says All Deployments is available on all plans and can use Vercel Authentication without a paid add-on. The requested setting was Vercel Authentication, not Password Protection. We have not treated that AI explanation as a confirmed root cause.
Could the MCP/authorization team identify the failed authorization check and the supported corrective action? The original request ID and account context were supplied through the official Help conversation; please advise a private channel if those diagnostics are needed for investigation.
We have stopped retries and have not removed protection, upgraded plans, changed permissions, or used another credential path to bypass the denial.
Thank you.