Skip to main content

​
401 Unauthorized

  • Confirm the header uses Bearer, followed by one space and the complete key.
  • Confirm the key begins with af_mcp_live_ and was copied without quotes or whitespace.
  • Check Dashboard → MCP & API for expiration or revocation.
  • Restart the client after updating its environment variable.

​
403 Forbidden

The credential is valid but does not authorize the requested operation. Create a new key with the required permission; existing keys cannot be expanded after creation.

​
Tool is missing

AutoFire advertises only tools authorized by the key. Also check client-side enabled_tools or tool allowlists.

​
404 on OAuth discovery

Expected while public OAuth is disabled. Configure bearer authentication. OAuth-only clients are not currently supported.

​
413 Request too large

The MCP request exceeded 128 KiB. Reduce prompt-injected tool arguments or batch size. AutoFire list tools already cap results at 50.

​
429 Too many requests

Honor the Retry-After header, slow the workflow, and avoid retry loops. Use pagination and cache non-sensitive results inside your approved workflow where appropriate.

​
Vehicle or lead not found

The record may not exist, or it may belong to a different dealership. Cross-dealership UUIDs intentionally return no data.

​
Still blocked

Send the approximate timestamp, client name/version, HTTP status, and key prefix shown in the dashboard to AutoFire support. Never send the complete key or customer data.