BerriAI/litellm · error · HTTPException

User does not have permission to call vector store endpoint

Error message

User does not have permission to call vector store endpoint {index_name}. Ask your administrator to add the necessary permissions to your API key/Team.

What it means

Vector-store endpoint permission check: the request's method+route matched a provider write or read pattern, but check_vector_store_permission found no matching grant in the key/team metadata (vector_store_endpoints field). The index name is named in the message; an admin must add the endpoint permission to the key or team.

Source

Thrown at litellm/proxy/vector_store_endpoints/utils.py:406

        return True

    # Writes are classified before reads so a path matching both patterns
    # requires the stronger grant (e.g. the azure batch write on an index
    # named "analyze*" also contains the "/analyze" read fragment)
    permission_type = None
    for endpoint in provider_vector_store_endpoints["write"]:
        if request.method == endpoint[0] and _does_endpoint_match(endpoint[1], request_route):
            permission_type = "write"
            break

    if permission_type is None:
        for endpoint in provider_vector_store_endpoints["read"]:
            if request.method == endpoint[0] and _does_endpoint_match(endpoint[1], request_route):
                permission_type = "read"
                break

    if permission_type is None:
        raise HTTPException(
            status_code=403,
            detail=(
                f"User does not have permission to call vector store endpoint "
                f"{index_name}. Ask your administrator to add the necessary "
                "permissions to your API key/Team."
            ),
        )

    # Check if key has specific permission for allowed_vector_store_indexes
    has_permission: Final = check_vector_store_permission(
        index_name=index_name,
        permission=permission_type,
        key_metadata=key_metadata,
        team_metadata=team_metadata,
    )

    if not has_permission:
        raise HTTPException(

View on GitHub (pinned to 77b7c6c40c)

Solutions

1. Ask your administrator to add vector store endpoint permissions to your API key or team.

When it happens

Trigger: Thrown at litellm/proxy/vector_store_endpoints/utils.py:406 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of BerriAI/litellm@77b7c6c40c (2026-08-18). Data as JSON: /api/errors/24f0259e5f63f61f. Report an issue: GitHub.