Troubleshoot API and AI connections
Resolve missing tools, denied access, expired keys and uncertain changes without repeating actions.
First identify how you connected: a hosted AI connection uses BlazingFast sign-in and AI connection permissions; an SDK, CLI or local MCP server uses an API key.
Missing tools or blocked AI actions
- Confirm the BlazingFast app is selected in the conversation.
- Open AI connections and check its expiry, selected permissions and policy.
- If the required permission is available, enable it and save. If it was not included in the original consent, reconnect.
- Refresh the app connection's tool list after a tool update, then start a new conversation.
- For pending changes, check the operation request's status instead of submitting a second request.
Read only blocks writes. Write with approval waits for the dashboard. Full access executes permitted changes automatically. The AI platform can still decline a tool call or request its own confirmation.
If the AI client says its own safety gate blocked a call, this does not prove BlazingFast received it. Check the invoice, service or operation status before trying again.
API errors
| Result | What to check |
|---|---|
| 400 | Required fields, supported codes, types and mutually exclusive options |
| 401 | Key/token, secret, expiry, enabled state; computer clock for signed requests |
| 403 | Required scopes, account/project access and IP restrictions |
| 404 | Resource identifier, ownership and endpoint path |
| 409 | Current service state, conflicts or an operation already in progress |
| 429 | Request rate; follow Retry-After when supplied |
| 5xx or timeout | Read current state and retain the original request key before retrying a write |
An IP-restricted endpoint can return 403 before key authentication. Follow the API origin displayed in your account's Settings → API page. Use the origin alone as BF_API_BASE_URL, with no trailing /v1.
CLI command or local MCP executable not found
Run bf --version and bf --help in the virtual environment where you installed it. Activate that environment or configure the full executable path. Desktop apps do not necessarily inherit your terminal's PATH or environment.
Update using the newest downloadable archive when a command is absent in an older SDK. Do not install a similarly named package from another source.
A change has an uncertain outcome
A timeout is not proof that nothing happened. Read the resource, task or invoice. Preserve the same retry key and payload if retrying that action. Do not generate a replacement key or pay the invoice a second time without checking its balance.
For Website Protection, a response can say configuration was saved but synchronization is incomplete. Read back the saved configuration and follow the returned status; do not describe it as a rollback.
Understanding resource usage
VPS CPU is a fraction: 0.25 means 25%. Network and disk I/O byte counters are cumulative; rates require two samples and the elapsed time. VM disk counters do not establish guest filesystem free space. Missing values mean unavailable. Backup pool usage and the number of a VPS's backups answer different questions.
Contact support
Include the action, time and timezone, SDK version, HTTP status, error code, and request_id or x-request-id if supplied. Do not include API secrets, passwords, private keys or full authorization headers.