# invalid_grant

> OAuth (Sign in with Tickwire): the authorization code, refresh token or access token is not valid for this request.

Source: https://tickwire.io/docs/errors/invalid_grant/

HTTP 400.

**Likely causes:**

- The code or refresh token was already used, expired or revoked.
- A rotated-out refresh token was reused, so the whole token chain was revoked.
- PKCE verification failed, or redirect_uri differs from the authorization request.
- The connection was disconnected, expired, or its agent key was revoked.
- The access token was issued for another resource (MCP server URL).

**What to do:** Start the sign-in again from the app (a new authorization request). Never retry with the same refresh token.

**Retry:** No. The same request gets the same answer; change something first.

Listed under [Sign in with Tickwire (OAuth)](https://tickwire.io/docs/errors/#sign-in-with-tickwire-oauth) in [Errors](https://tickwire.io/docs/errors/). Send the error's `requestId` to support and we can find the request.