Forbidden here, forbidden there

This is the message I’m always getting:

{'message': 'forbidden.'}

Whether I use my paper trading API Keys or the ones I got from OAuth Developer apps. Either way, the docs are unclear as to which keys I should use when trying to query simple data API. Endpoint:

https://data.alpaca.markets/v1/last/stocks/{symbol}
https://data.alpaca.markets/v2/last/stocks/{symbol}

What am I doing wrong? Which keys should I be using?

Version 1 of the Data API is forbidden. Just use the version 2 endpoints. But some URL for the v2 endpoints is different. For instance, the latest trade endpoint URL in v2 looks like this:

https://data.alpaca.markets/v2/stocks/{symbol}/trades/latest

No dice. Still says forbidden. Should I be using the keys from my paper wallet or the API keys that I created during App creation? Either way, both are giving me 403 Forbidden

I have the same thing.
v2
Was working fine a few months ago and now forbidden for both paper and live keys.

It’s one thing to have code that doesn’t work, but for the hist feed to break randomly is unacceptable especially when I pay for the unlimited plan for rt feed.
I’m not aware of any breaking changes for v2 over the last few months. Isn’t part of versioning meant to address breaking changes?