OpenCode free-tier 403 bug: restricted custom subagents rejected as non-OpenCode calls
w3struk · ghdev · 2026-10-12
GitHub issue #54744 in anomalyco/opencode (v2.0.27) reports a reproducible bug: on free-tier models, custom subagents with restricted tool allowlists under deny-by-default permissions fail with a 403 'OpenCode's free tier can only be used from within OpenCode', while built-in agents with full toolsets work in the same session.
Key details:
- A second custom subagent with bash allowed fails identically, so the missing bash tool isn't the cause — the restricted tool shape itself correlates with failure.
- Server logs show AI.Error.Authentication on the child sessions; failure is consistent, not intermittent.
- Only workaround is granting the full toolset, which defeats the purpose of restricted permissions.
The issue is still in triaging, suggesting free-tier auth may be misclassifying restricted subagent sessions as external client calls.
More from coding & agent
- Dev interview: Pi Coding Agent, a simple toolkit for building your own coding agent — 4310sy · 2026-10-12
- Hugging Face's ML Intern turns a prompt into a trained model: 6 models in a week for ~$100 — Gradio · 2026-10-12
- VoiceStudio hits 59K stars: 10 exploding GitHub repos, from no-code to technical — PrajwalTomar_ · 2026-10-12
- yoagent: a Rust agent runtime that reuses pi extensions and DeepSeek Harness plugins — liyuanhao · 2026-10-12
- xses: a unified CLI to sync and resume AI coding agent sessions across 5 tools — Choice_Concern_5387 · 2026-10-12
- 15 role-based prompts claim to replace a $114,500 ML education, from theory to MLOps — bigaiguy · 2026-10-12