Troubleshooting

Check which side of the workspace, endpoint, and client handoff needs attention.

The app does not start

The backend waits for PostgreSQL, the tool runner, and local resource-storage initialization. On a first launch, image builds and database migrations take time.

A client cannot connect

Authentication fails

Do not confuse MCPKite's browser sign-in with an endpoint bearer token. A protected MCP server requires its assigned server token in the client's authorization header. That token is shown once when created; if it is lost, create or assign a new token.

For browser API requests from a separate UI origin, configure that exact origin in CORS_ALLOWED_ORIGINS. Credentialed CORS cannot use a wildcard, and cross-site authentication cookies are not supported.

A tool is missing or fails

A resource is missing

Verify the resource URI and, for templates, the requested URI parameter. A text resource uses matching double-brace placeholders in its body. A binary resource must be within 50 MiB, use a supported extension and MIME type, and have working object storage credentials.

Confirm the selected S3 or Azure provider is configured and the bucket or container is private but reachable by the backend. Local S3Mock and Azurite are development emulators, not production services.

Collect useful diagnostics

Start with the affected service's logs, such as docker compose logs backend or docker compose logs tool-runner. Reproduce with safe, representative inputs and record the time and failing endpoint path.

Before sharing diagnostics, remove cookies, Inspector launch URLs, authorization headers, server tokens, database passwords, workspace variable values, and secret values. Never include a secret in sample tool output.