MCP Troubleshooting

Missing Authorization Header

Make sure the MCP client sends:

Authorization: Bearer od_your_api_key

Key Is Rejected

Check that the API key is active, not revoked, not expired, and enabled for MCP / AI tools.

Tools Are Empty

The MVP exposes tenant delivery tools only. System-admin MCP tools are deferred.

Permission Errors

The API key has the same roles and permissions as the user who created it. Update that user's Ondi permissions or use a key created by a user with the right access.

Tenant ID Questions

Tenant users should not provide tenant ID. Ondi uses the tenant context from the API key.

Key Exposure

If a key was pasted into chat, sent in plain text, or committed to a repository, revoke it in Ondi and create a new MCP-enabled key.