View as Markdown

invalid_grant

OAuth (Sign in with Tickwire): the authorization code, refresh token or access token is not valid for this request.

HTTP 400.

Likely causes:

  • The code or refresh token was already used, expired or revoked.
  • A rotated-out refresh token was reused, so the whole token chain was revoked.
  • PKCE verification failed, or redirect_uri differs from the authorization request.
  • The connection was disconnected, expired, or its agent key was revoked.
  • The access token was issued for another resource (MCP server URL).

What to do: Start the sign-in again from the app (a new authorization request). Never retry with the same refresh token.

Retry: No. The same request gets the same answer; change something first.

Listed under Sign in with Tickwire (OAuth) in Errors. Send the error’s requestId to support and we can find the request.