Start here
Run these checks first:codex with claude or cursor when needed.
Confirm which binary is running
If the wrong or old CLI version appears to run, confirm the binary. On macOS or Linux:Node.js version is too old
Cause: the CLI requires Node.js22.12 or newer.
Safe next action:
- Install a supported Node.js version.
- Open a fresh terminal.
- Run
node --version. - Run
custory doctor.
CLI discovery is unreachable
Common codes:CLI_DISCOVERY_UNREACHABLEDISCOVERY_UNREACHABLE
/.well-known/custory-cli.json from the configured Custory app.
Safe next action:
- Check network or proxy access.
- Remove
--app-urlunless Custory specifically told you to use it. - If using
--app-url, confirm it points to the intended Custory app origin. - Run
custory doctor.
Custory service is unreachable or not ready
Common doctor codes:SERVICE_UNREACHABLESERVICE_NOT_READY
npm cannot find the package or version
Cause: npm registry access, network configuration, cache state, or a mistyped package name. Safe next action:@custory/cli.
Retry after network or registry access is working.
Browser sign-in does not open
Cause: the terminal could not launch a browser. Safe next action:Visit URL into your browser and complete sign-in.
Retrying is safe.
Common error codes: AUTH_PROVIDER_UNREACHABLE, AUTH_START_FAILED, AUTH_EXPIRED, AUTH_DENIED, AUTH_TOKEN_FAILED, AUTH_CANCELED.
Browser sign-in does not complete
Cause: the authorization flow expired, was canceled, or completed with a different account than expected. Safe next action:--force when you need to replace the active account.
No workspace is available
Cause: the signed-in account has no accessible workspaces, or you are signed in with the wrong account. Safe next action:custory init to create a new workspace when appropriate.
Workspace name is ambiguous
Cause: more than one accessible workspace matches the name you passed. Safe next action:Website context is rejected or weak
Cause: the page may be private, blocked, redirected unexpectedly, too large, too thin, or not a useful product explanation. Safe next action:- use a more focused public URL
- use
--briefwith a private product summary - use
--stdinfrom a reviewed agent-generated summary
1,500,000 bytes, and fetches that exceed 20 seconds.
Do not force a weak source with --yes unless you are comfortable heavily editing the result.
Setup was interrupted
Cause: the terminal stopped during an active onboarding session. Safe next action:A command says confirmation is required
Cause: non-interactive setup reached a source or persona confirmation step without permission to continue. Safe next action:- rerun interactively with
custory init - or rerun non-interactively with
--yesonly after reviewing the input source
INPUT_REQUIRED.
MCP client cannot be detected
Cause: the CLI found no supported client or more than one possible client. Safe next action:codex, claude, and cursor.
Common error code: MCP_CLIENT_REQUIRED.
MCP config is malformed
Cause: Claude or Cursor config is not valid JSON, or the existingmcpServers field is not an object.
Safe next action:
- Open the config file.
- Fix the JSON.
- Rerun
custory mcp install --client codex --workspace "Acme"with the right client and workspace.
- Codex:
~/.codex/config.toml - Claude:
~/.claude.json - Cursor:
~/.cursor/mcp.json
MCP_CONFIG_INVALID.
MCP verification fails
Cause: the MCP credential, endpoint, workspace binding, or client config could not be validated. Safe next action:MCP_NOT_INSTALLED, MCP_UNREACHABLE, MCP_VERIFICATION_FAILED, MCP_WORKSPACE_BINDING_INVALID, MCP_BINDING_INVALID.
Machine-readable partial results
Cause: a command completed with warnings or a tool returnedsuccess: false.
Safe next action:
- inspect the JSON result
- check
warnings - open the returned journey URL when one exists
- treat exit code
5as partial success - treat exit code
4as a recoverable or tool-level failure that needs review
Safe information to share with support
Safe:- CLI version
- command name
- error code
custory doctoroutput after removing private IDs- whether the command used website, brief, or stdin input
- tokens
- credentials
- device codes
- private brief contents
- private customer data
- raw MCP authorization headers