You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Here are some details of the various errors, for the oolama not sure why I got this, I thought with free limits I can test every model provided with their api.... hmm?
@vebaev Not sure on how it works with the Ollama cloud models since it kinda confuses me access to cloud models and run cloud models, but can u normally run the models? Since its saying invalid api key, im kinda confused. Also I think we should give out better labels for why we failing the calls.
Ahh, wait. I overlooked ur messages at the screenshots.
On Ollama Cloud: Free does not mean every cloud model. Free is light usage + a subset of models; a lot of the bigger ones (including many Kimi / large Qwen / DeepSeek-class models) return 403 and need Pro. So if the key works but that model is gated, Ollama rejects it even though the API key itself is fine.
That also explains the confusing Details UI: we currently map many upstream 403s to invalid_api_key, which looks like a bad key when it’s really “authenticated, but this model/plan isn’t allowed.”
Quick check if you want: try something that’s usually free-tier friendly on the same key (e.g. gemma4:31b). If that works, your setup is fine and the earlier 403 was plan/model access.
I’ll improve those error labels so permission / subscription failures don’t look like invalid API keys.
1. The misleading label is fixed. Your screenshot showed a bare upstream 403 surfacing as invalid_api_key, which pointed you at the wrong cause. This is now fixed on dev (commits 5292b98 + 4d28558, absorbing PR #145 with repairs): a bare Provider error 403 now classifies as permission_denied, and subscription-style messages classify as subscription_required — verified end-to-end with an Ollama-shaped error body through the real server → adapter → classifier path.
2. The 403 itself comes from Ollama, not opencodex. Evidence from review:
Direct ollama.com API access requires a bearer API key (auth docs);
kimi-k2.7-code:cloud is a large cloud model — Ollama's Free tier covers light usage/smaller models, while Pro unlocks the larger cloud models (pricing);
the same Kimi-family 403 ("this model requires a subscription, upgrade for access") is reported upstream in ollama/ollama#15741 while other models work on the same account.
So the request was authenticated but your Ollama plan doesn't include that model. A free-tier-covered model with the same key should work; kimi-k2.7-code needs an Ollama Pro subscription. Closing as an upstream plan restriction — the opencodex-side mislabeling that made this confusing is fixed and ships with the next release.
Activity
vebaev commentedon Jul 17, 2026
Here is the log with some errors if this helps:
Wibias commentedon Jul 17, 2026
The Details would help! @vebaev
vebaev commentedon Jul 17, 2026
Here are some details of the various errors, for the oolama not sure why I got this, I thought with free limits I can test every model provided with their api.... hmm?
PS. opencodex is great app!
Wibias commentedon Jul 17, 2026
For nvidia that is expected, when there is too much demand right now. Dont know about ollama though!
Wibias commentedon Jul 18, 2026
@vebaev Not sure on how it works with the Ollama cloud models since it kinda confuses me access to cloud models and run cloud models, but can u normally run the models? Since its saying invalid api key, im kinda confused. Also I think we should give out better labels for why we failing the calls.
Wibias commentedon Jul 18, 2026
Ahh, wait. I overlooked ur messages at the screenshots.
On Ollama Cloud: Free does not mean every cloud model. Free is light usage + a subset of models; a lot of the bigger ones (including many Kimi / large Qwen / DeepSeek-class models) return 403 and need Pro. So if the key works but that model is gated, Ollama rejects it even though the API key itself is fine.
That also explains the confusing Details UI: we currently map many upstream 403s to invalid_api_key, which looks like a bad key when it’s really “authenticated, but this model/plan isn’t allowed.”
Quick check if you want: try something that’s usually free-tier friendly on the same key (e.g. gemma4:31b). If that works, your setup is fine and the earlier 403 was plan/model access.
I’ll improve those error labels so permission / subscription failures don’t look like invalid API keys.
lidge-jun commentedon Jul 18, 2026
Two-part resolution:
1. The misleading label is fixed. Your screenshot showed a bare upstream 403 surfacing as
invalid_api_key, which pointed you at the wrong cause. This is now fixed ondev(commits 5292b98 + 4d28558, absorbing PR #145 with repairs): a bareProvider error 403now classifies aspermission_denied, and subscription-style messages classify assubscription_required— verified end-to-end with an Ollama-shaped error body through the real server → adapter → classifier path.2. The 403 itself comes from Ollama, not opencodex. Evidence from review:
kimi-k2.7-code:cloudis a large cloud model — Ollama's Free tier covers light usage/smaller models, while Pro unlocks the larger cloud models (pricing);So the request was authenticated but your Ollama plan doesn't include that model. A free-tier-covered model with the same key should work;
kimi-k2.7-codeneeds an Ollama Pro subscription. Closing as an upstream plan restriction — the opencodex-side mislabeling that made this confusing is fixed and ships with the next release.vebaev commentedon Jul 18, 2026
Thanks, that explains it :) Oolama should explain it more clearly.