# Upstash Vector: Forbidden: /upsert-data is not allowed on upsert
## The problem
Calling `index.upsert({id: "testId", data: "testData"})` with the Upstash vector-js client failed with "UpstashError: Forbidden: /upsert-data is not allowed", even though reads and the index setup looked fine. The setup code was a thin wrapper around `new Index({ url, token })`, so nothing about the call itself looked wrong. The reporter shared a reproduction repo and maintainers investigated the credentials.
## The verified fix
You are using the read-only token. The reporter's own resolution: they had copied the readonly credentials from the Upstash console. Switch to the read-write token for upserts; also make sure the index has an embedding model active if you upsert with raw `data` instead of vectors.
Source: https://github.com/upstash/vector-js/issues/33