Fine-grained grok_ personal API keys fail My Machines `agent worker` liveness (404 valid:false); `/v1/me` OK

Support Bug Reports
, ,
5

Hey, thanks for the detailed report and repro. And yes, you’re right that this is separate from the 503 issue.

When the worker starts, it checks its API key through a separate validation step, and that step doesn’t recognize the new keys with the grok_ prefix yet. So /v1/me returns 200, but the worker still sees 404 valid:false, no matter what grants are attached to the key. I’ve passed this on to the team.

Until that’s fixed, you can run the worker with browser login instead of an API key. This login refreshes itself, so it also works for a long-running worker like a LaunchAgent or systemd service.

  1. unset CURSOR_API_KEY and remove it from the LaunchAgent plist too if it’s set there.
  2. Run agent logout, then agent login, and finish the login in the browser.
  3. From the git workspace, run agent worker start --name "repro-worker".

If step 3 still shows Authentication required, send the output of agent status and agent --version, and we’ll take a closer look. I’ll reply here when there’s an update on the main issue.