Authentication issues
Signing in, two-factor, API keys, and tokens on sites.
Cannot sign in
The password reset is on the login page. If the login page itself shows an error before you have entered anything, that is a platform problem; report it.
Two-factor
Recovery codes are shown when two-factor is enabled and can be regenerated from the profile. Without the device and without a code, write to support.
An API key is refused
A revoked key stops working at once; check the key under workspace settings. The key goes in the Authorization header as a bearer token — Authentication.
A site refuses the token
The site holds a token that is not the workspace's, or another plugin answered before the worker — Connection problems. Paste the current workspace token into Octo Tools → Settings → General on the site.
The magic login does not work
The site issues a ticket valid once and for one minute; a ticket used twice or too late is refused, and a new one is issued by clicking again. A site that redirects, or one behind a firewall that challenges the request, refuses the platform's call for the ticket — the Health page shows which.