Troubleshooting

Common issues, causes, and fixes.

invalid token / not signed inCLI or dashboard

Cause

Your session expired or you haven't signed in. Authentication is handled by WorkOS (SSO); the CLI stores a short-lived token and refreshes it automatically.

Fix

Run mp login again to re-authenticate. In CI, set MEOWPASS_TOKEN (a scoped API key) instead of logging in.

bash

mp login

mp pull fails for team memberCLI

Cause

The vault hasn't been shared with the team, or the member hasn't signed in.

Fix

The vault owner shares the vault with the team; each member signs in with mp login. Access is granted server-side, with no key exchange.

bash

# Owner shares vault with team mp share VAULT_ID --team TEAM_ID # Team member signs in mp login

no access to vault (403)CLI or dashboard

Cause

You are not the vault owner and haven't been granted access to it.

Fix

Ask the vault owner to share the vault with you or your team.

bash

mp share VAULT_ID --team TEAM_ID

vault limit reached, upgrade to ProCLI or API

Cause

Free tier is limited to 10 vaults and 50 secrets. You've hit the vault limit.

Fix

Upgrade to Pro ($5/mo) for unlimited vaults and secrets. Or redeem a promo code if you have one.

bash

# Redeem a promo code mp promo redeem MP-XXXXX # Or upgrade at meowpass.dev/docs (pricing section)

secret limit reached, upgrade to ProCLI or API

Cause

Free tier allows 50 secrets total across all vaults.

Fix

Same as the vault limit. Upgrade to Pro or redeem a promo code.

bash

mp promo redeem MP-XXXXX

secret not foundWeb app or CLI

Cause

The secret exists under a different environment. Secrets are scoped by env (default, local, production, etc.).

Fix

Check which environments have secrets, then specify the correct one.

bash

# List all secrets across all environments mp list --vault VAULT_ID # List secrets for a specific env mp list --vault VAULT_ID --env production

No MeowPass project configuredCLI

Cause

The CLI can't find a .meowpass.yaml file in the current directory or any parent directory. This file links a repo to a vault.

Fix

Run mp init in your project root to create the config file, or specify the vault manually with --vault.

bash

# Initialize a new project mp init # Or specify vault manually mp pull --vault VAULT_ID

Not authenticatedCLI or dashboard

Cause

No valid session. Authentication is handled by WorkOS (SSO).

Fix

Run mp login to sign in via the browser. In CI, set MEOWPASS_TOKEN.

bash

mp login

Empty activity logWeb app

Cause

Audit logging only tracks actions performed after the feature was deployed. Existing vaults and secrets created before have no audit trail.

Fix

Perform any vault or secret action (set, delete, rotate, share) and it will appear in the activity log.

bash

mp set TEST_KEY hello --vault YOUR_VAULT

API key invalid or expiredMCP server or CI/CD

Cause

The API key was revoked, or it was never created. API keys start with mp_ prefix.

Fix

Create a new API key and update your MCP or CI/CD config.

bash

mp apikey create my-mcp-key

Still stuck?

Join our Discord server for help, or open an issue on GitHub.