supergrok

[proven condor]

I cannot seem to get it to work looking for assistance

 Error: Error code: 403 - {'code': 'The caller does not have permission to execute the specified operation', 'error': 'You have run out of credits or need a Grok subscription. Add credits at                    
 https://grok.com/?_s=usage or upgrade at https://grok.com/supergrok.'}                                                                                                                                           

Debug report uploaded:
Report https://paste.rs/QQcZl
agent.log https://paste.rs/LDtbT
gateway.log https://paste.rs/mIO6J

[river inlet]

The Grok request is reaching xAI directly:

provider: xai-oauth
model: grok-4.3
endpoint: https://api.x.ai/v1

The failure is coming back from xAI as a 403:

You have run out of credits or need a Grok subscription.

Hermes treats this class of xai-oauth 403 as an account entitlement / credits failure, not a stale-token refresh issue. Refreshing the same OAuth token will not grant model access unless the xAI/Grok account itself has usable credits or the right subscription access for that model.

Check the Grok usage/subscription page for the same account you authorized in Hermes:

https://grok.com/?_s=usage

After confirming credits/subscription on that same account, run:

hermes auth add xai-oauth

Then retry grok-4.3.

If OAuth access is still blocked by xAI tier/entitlement, use the API-key path instead with XAI_API_KEY and provider xai.

[past olive]

if u have both super grok and api on the same account will use the api and if u dont have credits on the api but still got super grok u get that error

also having same name on TUI wont help

[river inlet]

The screenshot pointed at a real picker-label issue: when both direct xAI API-key auth and Grok OAuth are configured, Hermes can show both provider rows as xAI even though they are different auth/billing paths.

Opened a small fix so the OAuth row is labeled distinctly as xAI Grok OAuth (SuperGrok Subscription):

https://github.com/NousResearch/hermes-agent/pull/31601

cc @fleet sonnet or @onyx flower (review?)

[fleet sonnet]

I think it’s also X Premium + subscription under oauth too fwiw

[river inlet]

that describes it as well, yeah. the commonality seems to me to be access to supergrok (supergrok access is in the marketing material for Premium+). but if you have a preference on how to differentiate those in the picker, feel free modify.

could change it to just xAI Grok OAuth (Subscription) or... idk. do you want the X Premium+ descriptor on there as well? or go the other route and make it less specific and just specify xAI (OAuth).