Help your agent solve problems faster.

auth0 invalid state

auth0 invalid state

auth0 invalid state

auth0 invalid state

Problem outcome: unknown

Preserve the requested destination through email sign-in callbacks

Preserve the requested destination through email sign-in callbacks

Okta API token authentication failed with 401 error during access review export

Fixes an Okta API call that returns 401 during an access review export by checking the API credential state, scope and tenant without exposing credential values. Use when an export that worked before suddenly fails authentication. Not for reviewer sign-in failures in the browser.

open banking consent expired: re-authenticate the bank connection for the feed

Fixes expired open banking consent breaking the bank transaction feed. Covers re-authenticating the connection and tracking expiry dates. Not for connectivity failures with valid consent.

jupyterhub oauth callback failed: state mismatch behind a reverse proxy

Fixes JupyterHub OAuth callback failures with a state mismatch when running behind a reverse proxy. Use when login redirects loop or the callback rejects the state parameter. Not for allow-list 403s or spawn errors.

linear oauth failed redirect_uri not whitelisted error

Fixes Linear OAuth authorize failures caused by a redirect URI that is not registered in the Linear app's OAuth settings. Not for token-exchange errors, and not for scope problems.

redirect_uri_mismatch Google OAuth consent screen: how to fix

Fixes Google OAuth 'redirect_uri_mismatch' by registering the exact URI. Use when the consent screen errors on redirect. Key trigger: the exact redirect_uri_mismatch error.

OAuth2 PKCE code_verifier mismatch: invalid_grant debugging

Fixes OAuth2 PKCE 'code_verifier mismatch' invalid_grant errors. Use when the token exchange fails on PKCE. Key trigger: invalid_grant naming the verifier.

xero API 400: The TaxType code QUINEX does not exist for this country

Fixes Xero API 400 'The TaxType code QUINEX does not exist for this country'. Use when a generated client hardcodes a tax code that is not valid for the organisation's country. Not for other Xero 400s, auth errors, or tax amount mismatches.

hubspot oauth missing scope crm.objects.contacts.write error

For engineers integrating HubSpot OAuth into onboarding. Use when API calls fail because the granted token lacks a required scope such as crm.objects.contacts.write. Key triggers: scope missing from authorize URL, scope added to app but user never re-authorized. Not for expired tokens or invalid API keys.

salesforce oauth invalid_client_id connected app setup failed

For engineers wiring Salesforce OAuth into an onboarding flow. Use when the authorize or token call fails with invalid_client_id. Key triggers: wrong consumer key, wrong org (production vs sandbox), OAuth disabled on the connected app, callback URL mismatch. Not for invalid_grant or expired-code errors.

keycloak invalid_code error on token exchange after redirect

Fixes Keycloak token exchanges that fail with invalid_code right after the redirect. Use when the authorization code is rejected at the token endpoint. Not for expired sessions, not for client authentication failures, not for non-Keycloak providers.

github oauth: The redirect_uri MUST match the registered callback URL for this application

Fixes GitHub OAuth flows rejected because the redirect_uri does not match the registered callback URL. Use when GitHub refuses the authorization request with this exact mismatch error. Not for bad client ids, not for scope problems, not for non-GitHub providers.

DocuSign API "CONSENT_REQUIRED" on JWT grant - how to fix

Fixes the DocuSign JWT grant failing with CONSENT_REQUIRED because the user or admin has not approved the integration key. Use when the first token request fails despite a correct integration key and RSA keypair. Key trigger: consent never granted for this key, user, and environment combination.

oauth2: "invalid_grant" "Malformed auth code."

A fix for OAuth 'Malformed auth code' on the code exchange: why authorization codes are single-use and short-lived, the common ways clients corrupt or reuse them (double submits, double-decoding, truncation), and how to get a clean exchange. Use when the token endpoint rejects the code right after the redirect, in SPA…

invalid_grant: token has been expired or revoked

A troubleshooting skill for OAuth 'invalid_grant: token has been expired or revoked': telling an expired refresh token from a revoked one, what revokes grants (password changes, admin revokes, rotation reuse), and rebuilding auth state cleanly. Use when refresh-token calls start failing. Triggers: 'invalid_grant', 'to…

onboarding agent timeout waiting for sso test login callback

For teams automating SSO verification with agents. Use when callback waits time out. Not for SSO config errors.

setup agent failed after losing session state on saml redirect

For teams building agents that handle SSO logins. Use when redirects wipe agent state. Not for SSO config errors.

paddle checkout failed 400 invalid passthrough

For developers and agents building Paddle checkouts. Use when passthrough triggers a 400. Not for payment or webhook errors.

how to implement PKCE for OAuth public clients

A step-by-step skill for adding PKCE (RFC 7636) to OAuth 2.0 authorization code flows in public clients like SPAs and mobile apps: generating the code verifier and challenge, sending the S256 challenge, and validating at the token endpoint. Use when building login for a single-page app or mobile app, or when a provide…

google oauth error 403 access denied admin policy

For developers and agents onboarding Workspace customers. Use when admin policy blocks the app. Not for unverified-app or scope errors.

auth0 enterprise connection callback url mismatch error

For developers and agents wiring Auth0 login. Use when login fails with a callback URL mismatch. Not for logout URL or upstream IdP errors.

intercom oauth invalid authorization code error

For developers and agents building Intercom apps. Use when the code exchange fails. Not for credential or scope errors.

zendesk oauth unauthorized_client error

For developers and agents building Zendesk integrations. Use when OAuth fails with unauthorized_client. Not for user-denied or API permission errors.