403 Forbidden Error - Custom Components Upload Issue

[neculf]

Hello,

We are experiencing issues uploading custom components to our workspace.

ISSUE SUMMARY

Endpoint: POST /api/v2/custom_components
Error: 403 Forbidden
User Role: Editor

WHAT WORKS

1. API Key authentication is valid
2. GET /api/v1/haystack/components - Returns 200 OK
3. GET /api/v2/pipelines - Returns 200 OK
4. Custom Components tab IS VISIBLE in Pipeline Builder
5. Other API endpoints work correctly

WHAT DOESN'T WORK

1. POST /api/v2/custom_components - Returns 403 Forbidden
2. GET /api/v2/custom_components/logs - Returns 403 Forbidden

ATTEMPTED SOLUTIONS

• Generated new Personal API Key (also tested Service API Key)
• Verified Editor role permissions
• Followed official dc-custom-component-template structure
• Tested with v2 API endpoints
• Used recommended upload methods (hatch, curl, REST API)

TECHNICAL DETAILS

API Request Example:
curl -L -X POST 'https://api.cloud.deepset.ai/api/v2/custom_components'
-H 'Accept: application/json'
-H 'Authorization: Bearer api_eyJ...'
-F "file=@dist/custom_component.zip;type=application/zip"

Response:
{"errors":["Forbidden"]}
HTTP Status: 403

OBSERVATIONS

1. The API documentation (https://docs.cloud.deepset.ai/docs/api/main/
   import-custom-components-api-v-2-custom-components-post) does NOT list
   403 as a possible response code for this endpoint.

2. The Custom Components tab is visible in Pipeline Builder, suggesting
   the feature is enabled, but we cannot upload components.

3. This appears to be a permission restriction at the backend level that
   is not documented in the API specification.

REQUEST

Could you please provide guidance on what steps we need to take to resolve this issue?

Thank You!