---
title: Troubleshooting
slug: W15n-troubleshooting
docTags: 
createdAt: 2026-08-26T20:06:08.406Z
---

| <font color="#f3f4f6">**Error** </font> | <font color="#f3f4f6">**Description**</font>                           | <font color="#f3f4f6">**Solution**</font>                                                                                                                                                                                                                                               |
| --------------------------------------- | ---------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| "forbidden for user" error              | Your JFrog account doesn't have read permission on the SDK repository. | No separate access request is required. Re-login to JFrog with Kyndryl SSO, regenerate your identity token, refresh your local JFrog credentials, and retry.                                                                                                                            |
| "No matching distribution found"        | Credentials not configured or no repository access.                    | See [Developing agents](docId\:u0nqBox9bYe1CN-YialWW) for the complete troubleshooting flow.                                                                                                                                                                                            |
| "forbidden for user" (JFrog)            | No read permission on SDK repository.                                  | No separate access request is needed. Verify JFrog sign-in and credentials:<br />1. Re-login to [https://kyndryl.jfrog.io](https://kyndryl.jfrog.io/) using Kyndryl SSO<br />2. Regenerate your JFrog identity token<br />3. Refresh your local JFrog credentials and retry pip install |
| "401 Unauthorized" (MCP)                | SERVICE\_API\_KEY not set or invalid.                                  | 1. Verify SERVICE\_API\_KEY is set in .env<br />2. Regenerate the key in Bridge Console if expired                                                                                                                                                                                      |
| "403 Forbidden" (MCP Tools)             | Account doesn't have permission for the specific MCP tool.             | Contact Bridge Admin to enable the required tools for your account.<br />"Connection refused" (KAIF\_HOST)                                                                                                                                                                              |
| "403 Forbidden"                         | Incorrect KAIF\_HOST URL or no VPN connection.                         | 1. Verify KAIF\_HOST URL format<br />2. Ensure you're connected to Kyndryl VPN<br />3. Check if the environment is up                                                                                                                                                                   |



## Debug

```javascript
curl -u "your-email@kyndryl.com:<YOUR_ACCESS_TOKEN>" \
 "https://kyndryl.jfrog.io/artifactory/api/pypi/kyn-cto-kaif-pypi-local/simple/bridge-agent-sdk/"
```

## pip prompting for credentials

```javascript
.netrc not configured or has wrong permissions. 
chmod 600 ~/.netrc
```