magus v0.4.3 is out. See what's new
¶ View markdown source · ✎ Suggest an edit

MGS9003: token store is too new

A file in the token store ($XDG_STATE_HOME/magus/tokens.d) records a schema version higher than the running magus understands. A newer magus wrote it; this older one refuses to read it rather than risk misreading a credential.

[MGS9003] auth: token /path/tokens.d/laptop.json is version 3, newer than this
magus supports (2); upgrade magus
  see: .../MGS9003.md

Why

The store is versioned so its format can evolve. Reading a newer record with an older magus could drop a field that limits what the token may do. Magus fails closed instead.

Resolution

Upgrade magus to a version at least as new as the one that wrote the store. If you downgraded on purpose, remove the newer files and mint their replacements with this version. A file written by an OLDER magus is MGS9017 instead.

See also

AuthPages in this section. MGS9019: invalid token record skippedA file in the token store holds a record no mint could have written, so it is skipped and verifies nothing, while every other token keeps working. Remove it and mint its replacement. MGS9001: bearer token rejectedThe server refused a request because the bearer token it carried was wrong, expired, or revoked. This is the usual reason an MCP client cannot connect. MGS9002: insecure token file permissionsThe operator token file or a stored token's file is readable beyond its owner. Magus refuses to use it until the permissions are tightened to 0600.
MGS9003authtokenstoreversionupgrade
Last updated (f0d4ffc9)
Earlier changes on this page (1)

Full history ↗ · Blame source ↗

Glossary

Op

A single tool-native command a target composes (long form: operation); the middle of the work hierarchy (Spell to Op to Target). See operations.

Run

One target executing under one magus invocation, such as magus run test web or magus affected ci. A run keeps its captured output behind an output reference. Every magus run is a run whether or not any job asked for it; see Job for how the two relate.

Conventions

This page uses none of the site's convention markers. The full set is on the conventions page.