Troubleshooting

The usual suspects and how to fix them.

Computers

  • Shows Offline: the computer must be on and online, with the app running. On the computer run opsgate-device status (or the install command again: it keeps the link and restarts the app).
  • "Not allowed on this computer": raise the permission level on the computer's page in the dashboard.
  • "Outside the allowed folders": add the folder on the computer's page.
  • "Protected location": keys, cloud credentials and browser passwords are never shared, by design.
  • The browser did not open during setup: copy the address the terminal shows (https://mcp.opsgates.com/link?code=…).
  • Company networks: the app needs outbound HTTPS to https://mcp.opsgates.com.

Servers

Start with the built-in check on the server:

sudo opsgate doctor
sudo opsgate status
sudo opsgate logs

The installer says the key is not recognized

The key was revoked or mistyped. Add the server again in the dashboard and use the new command. Keys start with og_.

"Cannot reach OpsGates Cloud"

The server needs outbound HTTPS to https://mcp.opsgates.com. Check with:

curl -sI https://mcp.opsgates.com/healthz

The HTTPS address does not answer

  • Own domain: its DNS A record must point to the server's public IP (dig +short mcp.example.com).
  • Ports: 80 and 443 must be reachable from the internet (cloud provider firewall / security group too).
  • Certificate pending: Let's Encrypt can take a minute or two. Run sudo opsgate doctor again.
  • EasyPanel: if the route does not appear, restart Traefik from EasyPanel (Settings → Traefik → Restart).

Claude says it cannot connect / authentication failed

  • Use the URL ending in /mcp.
  • On the sign-in page, use the server's login password (from the installer or sudo opsgate password), not your OpsGates account password.
  • After sudo opsgate password, remove and re-add the connector, or click Connect again.

"Monthly tool-call limit reached"

Upgrade in Plan & billing, or wait for the 1st of the month (UTC).

"License key was rejected"

The server was removed in the dashboard. Create a new key and run sudo opsgate license og_….

"No write permission" / "Service not allowed"

By design: allow it with sudo opsgate allow-write /path or sudo opsgate allow-restart name.

"OpsGates could not reach its license server for more than 72 hours"

Restore the server's outbound HTTPS access; calls resume automatically within a minute.

Still stuck?

Write to support@opsgates.com with the output of sudo opsgate doctor (it contains no secrets).