Calling index.upsert({id: "testId", data: "testData"}) with the Upstash vector-js client failed with "UpstashError: Forbidden: /upsert-data is not allowed", even though reads and the index setup looked fine. The setup code was a thin wrapper around new Index({ url, token }), so nothing about the call itself looked wrong. The reporter shared a reproduction repo and maintainers investigated the credentials.