git_read or git_push fails even though I saved my token
This is the single most common stumble. The GitHub fields look for your token in the vault under a recognised name. If you saved it under a different name, the tool cannot find it and the call fails. Fix. Save (or re-save) your token under the nameGITHUB_TOKEN:
GITHUB_TOKEN in the returned list of names. Retry your git_read or git_push and it will resolve.
Workaround if you cannot rename right now. Every GitHub operation can also be done with proxy_http plus the GitHub REST API, passing the token in an Authorization header yourself. It is more verbose but always works:
secrets_vault says my field is missing or the action is invalid
The vault uses specific field names. Two near-misses account for almost every failure here.The action is
save, not set or store. The name field is secret_name, not key or name. The value field is secret_value, not value.save, list, get, and delete. Only save needs secret_value. get and delete need secret_name. list needs neither.
My database call fails with an auth or connection error
Database fields auto-inject your credentials, but only when they are saved under the names the injector looks for. Fix. Save your connection details underSUPABASE_URL and SUPABASE_KEY:
SUPABASE_KEY. Any PostgreSQL-compatible database works as long as the URL and key are reachable. After saving both, retry db_select, db_query, or db_write.
A field says it is required but I thought I sent it
Each tool reads its fields from thearguments object. A field nested one level too deep, or placed on the wrong tool, reads as missing.
Common causes:
- The field is on the wrong tool.
code,bash,git_push, anddb_writebelong toub_write.db_select,git_read, andfile_readbelong toub_read.web_searchandinvoke_llmbelong toub_ai. - The field is a string when it should be an object, or vice versa. For example
db_selecttakes an object, whiledb_querytakes a plain SQL string.
My code ran but timed out
Eachcode and bash call has a 60 second runtime cap.
Fix. For long work, split it across calls using a shared session_id so state stays warm between calls, or use parallel_blocks to run independent pieces at the same time:
proxy_http refuses my URL
proxy_http blocks internal network addresses, loopback, link-local ranges, and cloud metadata endpoints by design, to prevent server side request forgery. Only public http and https URLs are accepted.
Fix. Point the call at a public endpoint. If you are trying to reach something on a private network, that is intentionally not reachable from the sandbox.
A large response came back cut off
Response bodies above a fixed size are truncated and flagged in the response. Database reads reportreturned, total, and truncated so you always know when there is more.
Fix. Narrow the request. Add a limit and specific select columns to db_select, or filter the rows down. For large files, read in ranges rather than all at once.