Troubleshooting
Diagnose the layer that is actually failing.
1. Server or Agent health
Server:
Agent Host:
2. Enrollment and management
3. Remote Service
On the Agent Host:
DEGRADED means the configuration can exist while runtime health or synchronization is temporarily incomplete.
4. Policy
Use the corresponding test command. Do not infer authorization from Remote Service health.
5. AI Access
Verify AI authentication and identity first, then permission policy, then target Agent and OS permission. MCP does not bypass these layers.
6. Preserve evidence
Use system support-bundle where available. Do not expose tickets, bearer tokens, OAuth secrets, private keys, or unredacted secret-bearing configuration.Last modified on September 22, 2026
