Diagnose by stage
| Symptom | Next step |
|---|---|
palladin is missing |
Install the CLI with npm and check PATH. |
doctor fails |
Repair installation or secure-store access; do not replace key storage with a plain file. |
| MCP tools are missing | Check process configuration and restart the connection. |
| Profile does not exist | Confirm the alias with the user. Never select another automatically. |
| Agent awaits approval | Complete approval in the panel; do not create more identities. |
| Search does not find an entry | Check organization, profile, and Discovery availability. Do not guess IDs. |
| No grant | Request minimal access for the specific task. |
| Access denied or revoked | Stop; do not bypass the decision with another method. |
provider-unavailable |
Check supported version and browser channel. Do not switch to reading the password. |
| Child process failed | Separate access approval from program outcome; the grant use may already have been consumed. |
Safe report
Include CLI version, OS, stage, and error code. Exclude field values, tokens, script source, program stdout/stderr, and form data. Shorten identifiers with both prefix and suffix.
Restart MCP after a runtime update. Do not reset profiles or keychain as the first repair step.