Skip to content
CC Switch WikiUnofficial Community Wiki

Automatic approval review failed: unexpected status 403 Forbidden - cc-switch Codex

Quick fix

The CC Switch local proxy received an upstream 403 while handling the Codex /responses endpoint, causing automatic review to fail; no official fix is available.

Symptom

Section titled “Symptom”
Error output
Automatic approval review failed: unexpected status 403 Forbidden: CC Switch local proxy failed while handling Codex endpoint /responses. Provider: My Codex; model: codex-auto-review; upstream_status: HTTP 403; cause: This token has no access to model codex-auto-review (request id: 202606031817318386024528268d9d6DAnnzKsr), url: http://127.0.0.1:15721/v1/responses

Cause

Section titled “Cause”

When using CC Switch to proxy Codex, the local proxy is rejected by the upstream server with HTTP 403 Forbidden while calling the /responses endpoint for automatic review. The error explicitly says that the token cannot access the codex-auto-review model. This usually means the current API key does not support this internal model, or the model requires specific permissions or a subscription level.

Fix

Section titled “Fix”

  1. Check the current Codex provider configuration and confirm that the API key has permission to access the codex-auto-review model.

  2. Try another provider that supports this model, or contact the current provider to confirm whether additional permissions are required.

  3. If the problem persists, consider temporarily disabling Codex automatic review if CC Switch provides a related setting.

Affected Versions

Section titled “Affected Versions”
ToolCodex
Version3.16.1
PlatformsmacOS

Source Issues

Section titled “Source Issues”

This page is distilled from 2 real issues

FAQ

Section titled “FAQ”
Why does the 'This token has no access to model codex-auto-review' error appear?
This means the API token currently in use does not have permission to access the Codex automatic review model. This is usually because the model is internal or restricted and requires specific account permissions or a subscription level.
Is there a fix for this issue in CC Switch version 3.16.1?
According to the status of issue #3670, this issue was reported on version 3.16.1, and there is currently no clear information about a fixed version.
Section titled “Related problems”
502 Bad GatewayCodex/Claude Desktop reports 502 due to CLI proxy conflicts or app-server bypassing proxy. Remove proxy config or downgrade versions to fix.4 issues mergedsettings.json gets reset - Claude CodeWrite shared fields like plugins and hooks into "Common Config" and check write-back on switching; if takeover mode misbehaves, disable it, switch provider…12 issues mergedProvider API Key Overwritten: After Codex Restart or SwitchUpgrade to cc-switch v4.0.0 or later to prevent provider keys from overwriting each other and restore the official login state.6 issues merged

This is an unofficial community wiki with no affiliation to the cc-switch authors or the project itself. Its content is compiled from the project's public GitHub issues. This site distributes no software.