docs/errors/MCPX_HTTP_401.md
MCPX_HTTP_401Severity: error Domain: HTTP
The upstream MCP server returned 401 Unauthorized. mcpproxy either had no
credentials, or the credentials it presented were rejected.
MCPX_OAUTH_REFRESH_EXPIRED /
MCPX_OAUTH_REFRESH_403).headers was rotated server-side.Authorization header is being stripped by an intermediary proxy.mcpproxy upstream login <server-name>
Or click Log in again on the server's web UI page.
If the server uses a static API token (e.g. headers.Authorization: Bearer …),
generate a new token in that vendor's console and update the upstream config:
{ "headers": { "Authorization": "Bearer <new-token>" } }
Then restart that single server: mcpproxy upstream restart <server-name>.
mcpproxy activity list --request-id <id> # locate the failing call
The activity record includes the request ID and (redacted) headers.
MCPX_HTTP_403 — authenticated but lacks permission