Error when adding a contact as a member to a list

[CBman]

Hi folks, I'm getting a strange error where my application tries to interact with a HubSpot account's list. (the # sign represents an anonymized, GUID = anonymized GUID)
API URI: /crm/v3/lists/#/memberships/add-and-remove
RequestBody: {“recordIdsToAdd”:[“#",“#”,“#",“#”],“recordIdsToRemove”:[]}
API Response: 403 PUT
403 Forbidden: “{”status”:“error”,“message”:“You do not have permissions to edit object type ObjectTypeId{legacyObjectType=CONTACT} in portal # (requires one of [contacts-write])“,”correlationId”:“GUID"}”
This makes no sense given that the scope isn't event available for my oauth app and I'm not trying to do a write to a contact, I'm just adding contacts to a list. 

Is there any recommendations to remediate this? It references a deprecated scope in contacts-write from my understanding too. The account is using a Marketing Professional membership.

[Jaycee_Lewis]

Hey, @CBman 👋 I get the same result. In your tests, did you try the Add endpoint as well as the Add/Remove one? I am going to gather up our proof and share this with my internal resources. Thank you very much for taking the time to flag this. — Jaycee

[CBman]

So, our HubSpot application leverages the add/remove API on behalf of our clients and I do not have immediate access to leverage the token stored in production to test the add API out. However, for our other clients and testing that we leverage this API with, it has historically worked. Thanks for looking into this! 😄