#Codex OAuth Image Gen 403

1 messages · Page 1 of 1 (latest)

robust rose
#

Hi, I’m trying to use OpenClaw image generation with openai/gpt-image-2 through Codex OAuth.

What I’ve checked so far:

• OpenClaw is on 2026.4.23
• I re-authenticated Codex OAuth successfully with openclaw models auth login --provider openai-codex
• OAuth account is derricktantra@gmail.com
• I removed old duplicate openai-codex:* auth profiles and kept only the newest profile
• lastGood.openai-codex now points to openai-codex:derricktantra@gmail.com
• Gateway was restarted after the cleanup
• Config validation passes
• I also removed the direct models.providers.openai API-key config so it routes through Codex OAuth instead of OpenAI API key

The logs show OpenClaw is selecting the expected route:

[image-generation/openai] image auth selected:
provider=openai-codex
mode=oauth
transport=codex-responses
requestedModel=gpt-image-2
responsesModel=gpt-5.4

But generation still fails with:

OpenAI Codex image generation failed (HTTP 403)

My question: does this mean my OAuth is valid but my account does not have entitlement/access to the Codex image generation tool, or is there another config/auth state I should check?