Troubleshooting

Error	Description	Solution
"forbidden for user" error	Your JFrog account doesn't have read permission on the SDK repository.	No separate access request is required. Re-login to JFrog with Kyndryl SSO, regenerate your identity token, refresh your local JFrog credentials, and retry.
"No matching distribution found"	Credentials not configured or no repository access.	See Developing agents for the complete troubleshooting flow.
"forbidden for user" (JFrog)	No read permission on SDK repository.	No separate access request is needed. Verify JFrog sign-in and credentials: Re-login to https://kyndryl.jfrog.io using Kyndryl SSO Regenerate your JFrog identity token Refresh your local JFrog credentials and retry pip install
"401 Unauthorized" (MCP)	SERVICE_API_KEY not set or invalid.	Verify SERVICE_API_KEY is set in .env Regenerate the key in Bridge Console if expired
"403 Forbidden" (MCP Tools)	Account doesn't have permission for the specific MCP tool.	Contact Bridge Admin to enable the required tools for your account. "Connection refused" (KAIF_HOST)
"403 Forbidden"	Incorrect KAIF_HOST URL or no VPN connection.	Verify KAIF_HOST URL format Ensure you're connected to Kyndryl VPN Check if the environment is up

Debug

curl -u "[email protected]:<YOUR_ACCESS_TOKEN>" \
 "https://kyndryl.jfrog.io/artifactory/api/pypi/kyn-cto-kaif-pypi-local/simple/bridge-agent-sdk/"

.netrc not configured or has wrong permissions. 
chmod 600 ~/.netrc