Yep, it’s a permissions issue alright. Cloudflare is rejecting your attempt to read the zone.
Don’t know why though. Zone / Zone / Read and Zone / DNS / Edit should work according to a recent post:
Just to test - does it work with any other domains? Does it work with a global API key instead of a scoped API key?