Permissions & model scope
Why some models are unavailable
When a call returns MODEL_NOT_ALLOWED, your account or API key doesn't have
access to that model. Access is decided at two levels:
- Membership tier — each model has an access tier (FREE / PAID / TRUSTED / ENTERPRISE), and your account tier decides which tier you can reach.
- Per-user override — an administrator can individually ALLOW or DENY a specific model for an account, for whitelisting or gradual rollout.
Tiers and model access
- FREE: free trial models (e.g.
gemini-flash) - PAID / TRUSTED / ENTERPRISE: progressively more / higher-cost models
For which models each tier can use, see Membership tiers and Models overview.
API key allowed models
A key's allowed-model scope is synced down to the gateway (LiteLLM). So even if
you put a model in the request, the call is rejected when the key can't access
it — permissions are enforced at the data plane.
Beta models
Some models (e.g. Vision / web-search related) are currently INTERNAL_BETA, hidden from ordinary users by default and available only to admins or whitelisted users — see Web Search / Vision.