> ## Documentation Index
> Fetch the complete documentation index at: https://docs.goautofire.com/llms.txt
> Use this file to discover all available pages before exploring further.

# MCP troubleshooting

> Resolve authentication, permission, connection, and rate-limit errors.

## 401 Unauthorized

* Confirm the header uses `Bearer`, followed by one space and the complete key.
* Confirm the key begins with `af_mcp_live_` and was copied without quotes or whitespace.
* Check **Dashboard → MCP & API** for expiration or revocation.
* Restart the client after updating its environment variable.

## 403 Forbidden

The credential is valid but does not authorize the requested operation. Create a new key with the required permission; existing keys cannot be expanded after creation.

## Tool is missing

AutoFire advertises only tools authorized by the key. Also check client-side `enabled_tools` or tool allowlists.

## 404 on OAuth discovery

Expected while public OAuth is disabled. Configure bearer authentication. OAuth-only clients are not currently supported.

## 413 Request too large

The MCP request exceeded 128 KiB. Reduce prompt-injected tool arguments or batch size. AutoFire list tools already cap results at 50.

## 429 Too many requests

Honor the `Retry-After` header, slow the workflow, and avoid retry loops. Use pagination and cache non-sensitive results inside your approved workflow where appropriate.

## Vehicle or lead not found

The record may not exist, or it may belong to a different dealership. Cross-dealership UUIDs intentionally return no data.

## Still blocked

Send the approximate timestamp, client name/version, HTTP status, and key prefix shown in the dashboard to AutoFire support. Never send the complete key or customer data.