---
title: "Fireworks AI Deployment annotation keys must start with custom/ in the REST API: 2026-09-08 | Harbyn"
description: "Fireworks AI Deployment annotation keys must start with custom/ in the REST API, announced Sep 8, 2026."
canonical: "https://harbyn.com/changes/fireworks/2026-09-08-deployment-tags-and-annotation-api-changes"
last-updated: 2026-10-08
---

# Fireworks AI Deployment annotation keys must start with custom/ in the REST API

Markdown version of <https://harbyn.com/changes/fireworks/2026-09-08-deployment-tags-and-annotation-api-changes>.

Breaking change - Fireworks AI. high severity. In effect.

REST writes of customer-managed deployment annotations with bare keys (such as environment) now return HTTP 403 PERMISSION\_DENIED; keys must start with custom/. For regular account users, GetDeployment and ListDeployments now return only custom/\* annotation entries and silently omit other keys. Stored annotations were not rewritten. firectl 1.8.3 adds deployment tag set, unset and list commands.

## Facts

| Fact | Value |
| --- | --- |
| Vendor | [Fireworks AI](https://harbyn.com/vendors/fireworks.md) |
| Kind | Breaking change |
| Severity | high |
| Status | In effect |
| Announced | Sep 8, 2026 |
| Added to Harbyn | Oct 8, 2026 |
| Lead time | No dated deadline |
| Symbols | `GetDeployment`, `ListDeployments` |
| Review | Reviewed by a person, extracted by a model |

## Find it in your code

```sh
npx harbyn scan
```

This change names no identifier the scanner can match line by line, so the scan tells you whether your repository uses Fireworks AI, from its packages and API hosts. Nothing leaves your machine.

## Sources

Where this event comes from: the page we read, when we read it, and the hash of that snapshot.

- <https://docs.fireworks.ai/updates/changelog.md> (changelog, fetched 2026-10-08 23:25 UTC, sha256 `1bf88eeee00d5d4f82b23a1df6c1364178076e65d44e23564222916ba51170d0`)

## Related changes

### More from Fireworks AI

- [Older DeepSeek, GLM, Muse and Kimi models removed from Serverless on September 25, 2026](https://harbyn.com/changes/fireworks/2026-09-12-upcoming-serverless-deprecation-older-deepseek-glm-muse-and-kimi-models.md) (Retirement, effective Sep 25, 2026)
- [Creating a deployment without a shape will soon require acceptShapelessRisk](https://harbyn.com/changes/fireworks/2026-09-16-new-deployment-creation-flags-deploymentshape-default-and-acceptshapelessrisk.md) (Deprecation, announced Sep 16, 2026)
- [Managed RFT paused, no new reinforcement fine-tuning jobs accepted](https://harbyn.com/changes/fireworks/2026-10-01-managed-rft-is-paused-try-rl-on-the-training-api.md) (Breaking change, announced Oct 1, 2026)
- [DeepSeek V4 Flash 0731 retires from Serverless Training November 2](https://harbyn.com/changes/fireworks/2026-10-18-upcoming-serverless-training-deprecation-deepseek-v4-flash-0731.md) (Retirement, effective Nov 2, 2026)

### Changes at other vendors

- [Amazon Selling Partner API: October listing attribute usage and enumeration value updates](https://harbyn.com/changes/amazon-sp-api/2026-10-14-sp-api-updates-new-listings-items-api-ivp-values-in-eu5-jp-and-ca-stores-oct-2.md) (effective Oct 26, 2026)
- [Supabase: four CBC-mode TLS 1.2 cipher suites will be removed from project HTTP APIs](https://harbyn.com/changes/supabase/2026-10-12-an-outdated-subset-of-tls-1-2-ciphers-will-be-disabled-on-project-http-apis.md) (effective Nov 10, 2026)
- [Google Workspace APIs: OAuth clients must be marked as agentic to call Google Workspace MCP servers](https://harbyn.com/changes/google-workspace/2026-10-12-oauth-clients-must-be-marked-as-agentic-to-call-google-workspace-mcp-servers.md) (effective Nov 11, 2026)
- [Bitbucket Cloud API: Git Credential Manager upgrade required for OAuth 2.0 Git authentication](https://harbyn.com/changes/bitbucket/2026-10-13-git-credential-manager-upgrade-required-for-oauth-2-0-git-authentication.md) (effective Nov 30, 2026)

[All upcoming deadlines](https://harbyn.com/deadlines.md)