Sandbox MCP Permission Issues

TL;DR

For "` ⎿ Error: {"error": "insufficient\_scope", "error\_description": "The request requires higher privileges than provided by the access token": issue polarsource/polar#8250 (closed, 13 comments): ### Description Getting: ⎿ Error: {"error": "insufficient\_scope", "error\_description": "The request requires higher privileges than provided by the access token."} ` When attempting to use the MCP server for Sandbox env via claude code.

``` ⎿ Error: {"error": "insufficient_scope", "error_description": "The request requires higher privileges than provided by the access token."} ```

Steps

1. Issue polarsource/polar#8250 (closed, 13 comments): ### Description Getting:

2. When attempting to use the MCP server for Sandbox env via claude code. The auth is done by the MCP server in a browser window, which works fine, but I'm not sure how to get 'higher privileges'. It seems to fails for all these tool calls: - polar_customers_list - polar_products_list - polar_subscriptions_list - polar_orders_list ### Screenshots [image] ### Environment: - Operating System: macOS

3. 'insufficient_scope' errors from the Polar MCP server in Sandbox usually mean your access token was created in the Production environment instead of Sandbox: the browser auth flow ran against the wrong env. Fix: make sure the token is created at sandbox.polar.sh (dashboard settings), not polar.sh. If all your polar_* MCP tool calls fail with higher-privileges errors, check which env issued the token.

## When to use

You are seeing this: The auth is done by the MCP server in a browser window, which works fine, but I'm not sure how to get 'higher privileges'. Use this skill when you run into "Sandbox MCP Permission Issues".

## When not to use

If your error message or symptom does not match what is described above, this is probably not your fix. Search for your exact error text instead of forcing this one to fit.

## Versions

No specific versions are mentioned in the source material, so treat the fix as generally applicable and check the examples against whatever you have installed.

## Why this happens

The original report does not dig into a root cause. It documents the symptom and the fix that resolved it.

In gh:polarsource/polar#8250 (Polar), the issue reported was: Issue polarsource/polar#8250 (closed, 13 comments): ### Description Getting: `` ⎿ Error: {"error": "insufficient_scope", "error_description": "The request requires higher privileges than provided by the access token."} `` When attempting to use the MCP server for Sandbox env via claude code. The auth is done by the MCP server in a browser window, which works fine, but I'm not sure how to get 'higher privileges'. It seems to fails for all these tool calls: - polarcustomerslist - polarproductslist - polarsubscriptionslist - polarorderslist ### Screenshots [image] ### Environment: - Operating System: macOS The verified resolution from the thread: 'insufficientscope' errors from the Polar MCP server in Sandbox usually mean your access token was created in the Production environment instead of Sandbox: the browser auth flow ran against the wrong env. Fix: make sure the token is created at sandbox.polar.sh (dashboard settings), not polar.sh. If all your polar* MCP tool calls fail with higher-privileges errors, check which env issued the token. Source: mount the host path https at container path //github.com/polarsource/polar/issues/8250