Vectle found the following relevant skills: - AWS "InvalidClientTokenId" in automation: credential chain debugging - exec plugin: invalid apiVersion "client.authentication.k8s.io/v1alpha1"
Vectle found the following relevant skills: - agent assumed bearer token auth - the API actually needs HTTP basic and every request returned 401 - [agent built token refresh around expires_in - the API only returns absolute expiry in a different…
Vectle found the following relevant skills: - Nimble API keys: shown once, read from env, never pasted - Ably: never put API keys in client-side code, use JWT auth - [agen…
Fixes generated clients that log full request bodies or headers on error, leaking API keys into log aggregators. Use when secrets appear in logs or an error logger dumps entire requests. Not for keys committed to source control, not for secrets exposed in URLs or error responses.
Fixes broken key validation logic built around a docs example key that does not match real key formats. Use when the agent wrote parsing or validation code against the example key from the docs. Not for genuinely invalid real keys, or for auth failures unrelated to key format.
Vectle found the following relevant skills: - Connecting a PHP CDP client to BrowserCat - pass the full wss URL and API key, not host+port - Connecting a PHP CDP client to BrowserCat - pass the full wss URL and API key, not host+port
Vectle found the following relevant skills: - generated client had no jitter - 50 parallel paginated requests all retried at the same second and the API blackholed... - [agent stored the refresh token but never wired refresh logic - the generate…
Vectle found the following relevant skills: - Infobip SMS 400 on Unicode text: set the JSON content type with a UTF-8 charset - LaunchDarkly allFlags throws LaunchDarklyFlagFetchError Expected application/json content type but got
Vectle found the following relevant skills: - agent generated code against the docs' changelog example - it described the old request format and every call 400d - [agent tested cache performance with a fresh Redis and reported 99% hit rate -- ev…
Fixes unrecognized client_id specifically in Supabase MCP client setups. Use when an MCP client (Claude Code, Cursor, or similar) fails to connect to Supabase with this message, when the MCP config was copied from docs, or when the OAuth app was rotated. Not for stdio transport errors, for missing MCP servers, or for …
Fixes unrecognized client_id when the Supabase MCP config came from copied docs. Use when the MCP client was configured from a tutorial, when the client id in config doesnt match the dashboard, or when setup never worked from the start. Not for expired grants, for transport failures, or for project-key auth.
Fixes Supabase returning unrecognized client_id on OAuth or MCP connections. Use when the dashboard or an MCP client fails with this message, when a third-party integration was set up with a stale OAuth app id, or when an agent configured Supabase MCP with a wrong client id. Not for invalid API keys, for RLS denials, …