Skip to main content

The client cannot connect

401 Unauthorized. The key is missing, mistyped or revoked. Check the Authorization: Bearer co_... header in your client config, and that the key is still listed as active under Settings → Agents & MCP. OAuth clients get this when a session has expired and could not renew; sign in again. key_has_no_roles. You used an API key from Settings → API keys (those are for the REST API). Create an agent key under Agents & MCP instead. The client shows a warning about too many tools, or tools are missing. Connect to a smaller set with a scope in the URL, for example ?profile=core. See Tools and scopes.

The agent gets an error from a tool

Tool errors carry a code, a status and a hint the agent can read back to you.

An action is stuck as pending

The agent asked for something that needs a person. Approve or dismiss it under Settings → Agents & MCP → Agent requests. An agent waiting on it continues once you decide. See Approvals and roles.

The agent acts in the wrong workspace

An agent key belongs to the workspace it was created in. An OAuth session belongs to the workspace chosen at sign-in; sign in again and pick the right one, or connect a second server entry per workspace.

Something else

Email support@runrally.io with the key name, the tool and the time. Every agent call is in your audit log, which is usually enough to see what happened.