Troubleshooting¶
This page covers common issues you may encounter when using RunAgents and how to resolve them.
Agent Issues¶
Agent stuck in "Pending" status¶
The agent was created but has not transitioned to "Running."
Possible causes:
- Agent image is not accessible -- If you deployed custom agent code, verify the container image was built successfully. Check the build status via Agents > your agent > Overview.
- Required tools do not exist -- The agent references tools that have not been registered. Verify all tools listed in the agent's
requiredToolsare registered on the platform. - Required model provider does not exist -- The agent references a model provider that has not been created. Check the Models page to verify.
- Event log has details -- Navigate to the agent's detail page and check the event log for specific error messages.
Check the event log first
The agent's event log is the most reliable source of information about why an agent is not starting. Most issues include a descriptive error message.
Permission Errors¶
403 Forbidden on tool calls¶
The agent attempted to call a tool but was denied.
Possible causes:
-
No policy binding exists -- The agent does not have a policy granting access to the target tool.
- For Open tools: verify the tool is listed in the agent's required tools. Auto-binding creates the policy on deploy.
- For Restricted tools: you must create a policy and policy binding explicitly. Go to Approvals or use the API.
- For Critical tools: an approval is required for each access. Check the Approvals page for pending requests.
-
Capability mismatch -- The tool declares specific capabilities, and the agent's request does not match any of them. For example, the agent sends a
DELETErequest but the tool only allowsGETandPOST. Check the tool's registered capabilities. -
Deny rule takes precedence -- A deny rule in a policy is overriding an allow rule. Review the policies bound to the agent.
How to diagnose:
- Go to Approvals to see if there is a pending request for this agent + tool combination
- Check the tool's access control mode (Open, Restricted, or Critical)
- Review the tool's capabilities to ensure the requested operation is allowed
- Review policies bound to the agent's service account
APPROVAL_REQUIRED response¶
The agent called a tool that has requireApproval enabled.
What to do:
- An access request has been automatically created
- If the agent is in a run, the run has been paused (
PAUSED_APPROVAL) - An admin must approve the request on the Approvals page
- After approval, the run resumes automatically
Approvals are per-request for Critical tools
For tools with Critical access mode, each access requires a separate approval. Previously approved access expires after the configured TTL.
OAuth Issues¶
CONSENT_REQUIRED response¶
The tool uses OAuth2 and the end user has not authorized access yet.
What to do:
- The response includes an
authorization_url - Your client application should redirect the user to that URL
- The user completes the consent screen at the OAuth provider (e.g., Google)
- After consent, retry the original request -- the platform now has a valid token
See OAuth & Consent for the full flow.
OAuth callback fails¶
The OAuth callback URL did not receive the authorization code, or the code exchange failed.
Possible causes:
- Callback URL not configured -- Verify that the RunAgents OAuth callback URL is set in your platform configuration.
- Redirect URI not whitelisted -- The OAuth provider (e.g., Google, Slack) must have the RunAgents callback URL in its list of allowed redirect URIs. Check the provider's application settings.
- Invalid client credentials -- The
client_idorclient_secretin the tool's credentials are incorrect. Update them via the console or API. - State signature mismatch -- The HMAC-signed state parameter failed verification. This can happen if the signing key changed between the authorization request and the callback. Ensure the signing key is persistent.
LLM Gateway Issues¶
LLM Gateway returns 404 / model not found¶
The agent requested a model that is not registered on the platform.
What to do:
- Go to Models in the console
- Verify that the model name the agent uses (e.g.,
gpt-4o,claude-3-opus) appears in a registered model provider's model list - The model ID must match exactly -- check for typos or version mismatches
- If the model provider does not exist, create one with the correct provider type and model list
LLM Gateway returns 502 / provider unreachable¶
The LLM provider's API endpoint is not responding.
Possible causes:
- The provider is experiencing an outage (check their status page)
- The provider's URL in the model provider configuration is incorrect
- Network connectivity issues between the platform and the provider
Tool Issues¶
Tool status shows "Unavailable"¶
The platform periodically probes tool endpoints. An "Unavailable" status means the probe failed.
What to check:
- Base URL is correct -- Verify the tool's registered URL points to a live endpoint
- Endpoint is reachable -- The tool's API must be accessible from the platform's network
- Probe details -- Check
lastProbeTimeandprobeLatencyMsin the tool's details to understand when the last successful probe occurred
Probes are non-intrusive
The platform probes tool health using lightweight requests. An "Unavailable" status does not necessarily mean the tool is down -- it may indicate a network or DNS issue between the platform and the tool.
Build Issues¶
Build fails¶
The platform was unable to build a container image from your agent code.
How to diagnose:
-
Check the build status and logs:
-
Common issues:
- Missing dependencies -- The platform detected imports but could not resolve them to packages. Add a
requirements.txtto your agent code. - Invalid entry point -- The platform could not determine which file to run. Ensure your main file is clearly identifiable (e.g.,
main.py,app.py). - Unsupported language features -- The build environment supports Python. Check that your code is compatible.
- Syntax errors -- The code has syntax errors that prevent the build from completing.
- Missing dependencies -- The platform detected imports but could not resolve them to packages. Add a
Run Issues¶
Run stuck in PAUSED_APPROVAL¶
The run is waiting for admin approval on a tool access request.
What to do:
- Go to Approvals in the console
- Find the pending request for the run
- Approve or reject the request
- If approved, the run resumes automatically within a few seconds
Run failed unexpectedly¶
Check the run's event log for error events:
Look for ERROR events, which include details about what went wrong.
Getting More Help¶
Still stuck? We are here to help.
If you have tried the steps above and are still experiencing issues, contact us:
- Email: try@runagents.io
- Existing customers: support@runagents.io
- GitHub: github.com/runagents -- open an issue for bugs or feature requests
Include the following in your message for fastest resolution:
- Your agent name and the affected run ID (if applicable)
- The error message or response body you received
- Steps to reproduce the issue