From 1650ece0c3303d03c7afb87763cc8497f294c509 Mon Sep 17 00:00:00 2001
From: moverq1337 <moverq1337@gmail.com>
Date: Fri, 28 Aug 2026 22:45:31 +0300
Subject: [PATCH] Fix root API key access in verifyApiKeyAccessTokenAccess

---
 server/middlewares/integration/verifyAccessTokenAccess.ts | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/server/middlewares/integration/verifyAccessTokenAccess.ts b/server/middlewares/integration/verifyAccessTokenAccess.ts
index 93d986c0a..9908cf071 100644
--- a/server/middlewares/integration/verifyAccessTokenAccess.ts
+++ b/server/middlewares/integration/verifyAccessTokenAccess.ts
@@ -68,6 +68,11 @@ export async function verifyApiKeyAccessTokenAccess(
             );
         }
 
+        if (apiKey.isRoot) {
+            // Root keys can access any access token in any org
+            return next();
+        }
+
         if (!resource.orgId) {
             return next(
                 createHttpError(