Troubleshooting 🔧
When Equabot misbehaves, here’s how to fix it. Start with the FAQ’s First 60 seconds if you just want a quick triage recipe. This page goes deeper on runtime failures and diagnostics. Provider-specific shortcuts: /channels/troubleshootingStatus & Diagnostics
Quick triage commands (in order):| Command | What it tells you | When to use it |
|---|---|---|
equabot status | Local summary: OS + update, gateway reachability/mode, service, agents/sessions, provider config state | First check, quick overview |
equabot status --all | Full local diagnosis (read-only, pasteable, safe-ish) incl. log tail | When you need to share a debug report |
equabot status --deep | Runs gateway health checks (incl. provider probes; requires reachable gateway) | When “configured” doesn’t mean “working” |
equabot gateway probe | Gateway discovery + reachability (local + remote targets) | When you suspect you’re probing the wrong gateway |
equabot channels status --probe | Asks the running gateway for channel status (and optionally probes) | When gateway is reachable but channels misbehave |
equabot gateway status | Supervisor state (launchd/systemd/schtasks), runtime PID/exit, last gateway error | When the service “looks loaded” but nothing runs |
equabot logs --follow | Live logs (best signal for runtime issues) | When you need the actual failure reason |
equabot status --all (it redacts tokens). If you paste equabot status, consider setting EQUABOT_SHOW_SECRETS=0 first (token previews).
See also: Health checks and Logging.
Common Issues
No API key found for provider “anthropic”
This means the agent’s auth store is empty or missing Anthropic credentials. Auth is per agent, so a new agent won’t inherit the main agent’s keys. Fix options:- Re-run onboarding and choose Anthropic for that agent.
- Or paste a setup-token on the gateway host:
- Or copy
auth-profiles.jsonfrom the main agent dir to the new agent dir.
OAuth token refresh failed (Anthropic Claude subscription)
This means the stored Anthropic OAuth token expired and the refresh failed. If you’re on a Claude subscription (no API key), the most reliable fix is to switch to a Claude Code setup-token or re-sync Claude Code CLI OAuth on the gateway host. Recommended (setup-token):equabot models status
to sync the refreshed token into Equabot’s auth store.
More detail: Anthropic and OAuth.
Control UI fails on HTTP (“device identity required” / “connect failed”)
If you open the dashboard over plain HTTP (e.g.http://<lan-ip>:18789/ or
http://<tailscale-ip>:18789/), the browser runs in a non-secure context and
blocks WebCrypto, so device identity can’t be generated.
Fix:
- Prefer HTTPS via Tailscale Serve.
- Or open locally on the gateway host:
http://127.0.0.1:18789/. - If you must stay on HTTP, enable
gateway.controlUi.allowInsecureAuth: trueand use a gateway token (token-only; no device identity/pairing). See Control UI.
CI Secrets Scan Failed
This meansdetect-secrets found new candidates not yet in the baseline.
Follow Secret scanning.
Service Installed but Nothing is Running
If the gateway service is installed but the process exits immediately, the service can appear “loaded” while nothing is running. Check:- Preferred:
equabot logs --follow - File logs (always):
/tmp/equabot/equabot-YYYY-MM-DD.log(or your configuredlogging.file) - macOS LaunchAgent (if installed):
$EQUABOT_STATE_DIR/logs/gateway.logandgateway.err.log - Linux systemd (if installed):
journalctl --user -u equabot-gateway[-<profile>].service -n 200 --no-pager - Windows:
schtasks /Query /TN "Equabot Gateway (<profile>)" /V /FO LIST
- Bump file log detail (persisted JSONL):
- Bump console verbosity (TTY output only):
- Quick tip:
--verboseaffects console output only. File logs remain controlled bylogging.level.
”Gateway start blocked: set gateway.mode=local”
This means the config exists butgateway.mode is unset (or not local), so the
Gateway refuses to start.
Fix (recommended):
- Run the wizard and set the Gateway run mode to Local:
- Or set it directly:
- Set a remote URL and keep
gateway.mode=remote:
--allow-unconfigured to start the gateway without
gateway.mode=local.
No config file yet? Run equabot setup to create a starter config, then rerun
the gateway.
Service Environment (PATH + runtime)
The gateway service runs with a minimal PATH to avoid shell/manager cruft:- macOS:
/opt/homebrew/bin,/usr/local/bin,/usr/bin,/bin - Linux:
/usr/local/bin,/usr/bin,/bin
DISPLAY should live in ~/.equabot/.env (loaded early by the
gateway).
Exec runs on host=gateway merge your login-shell PATH into the exec environment,
so missing tools usually mean your shell init isn’t exporting them (or set
tools.exec.pathPrepend). See /tools/exec.
WhatsApp + Telegram channels require Node; Bun is unsupported. If your
service was installed with Bun or a version-managed Node path, run equabot doctor
to migrate to a system Node install.
Skill missing API key in sandbox
Symptom: Skill works on host but fails in sandbox with missing API key. Why: sandboxed exec runs inside Docker and does not inherit hostprocess.env.
Fix:
- set
agents.defaults.sandbox.docker.env(or per-agentagents.list[].sandbox.docker.env) - or bake the key into your custom sandbox image
- then run
equabot sandbox recreate --agent <id>(or--all)
Service Running but Port Not Listening
If the service reports running but nothing is listening on the gateway port, the Gateway likely refused to bind. What “running” means hereRuntime: runningmeans your supervisor (launchd/systemd/schtasks) thinks the process is alive.RPC probemeans the CLI could actually connect to the gateway WebSocket and callstatus.- Always trust
Probe target:+Config (service):as the “what did we actually try?” lines.
gateway.modemust belocalforequabot gatewayand the service.- If you set
gateway.mode=remote, the CLI defaults to a remote URL. The service can still be running locally, but your CLI may be probing the wrong place. Useequabot gateway statusto see the service’s resolved port + probe target (or pass--url). equabot gateway statusandequabot doctorsurface the last gateway error from logs when the service looks running but the port is closed.- Non-loopback binds (
lan/tailnet/custom, orautowhen loopback is unavailable) require auth:gateway.auth.token(orEQUABOT_GATEWAY_TOKEN). gateway.remote.tokenis for remote CLI calls only; it does not enable local auth.gateway.tokenis ignored; usegateway.auth.token.
equabot gateway status shows a config mismatch
Config (cli): ...andConfig (service): ...should normally match.- If they don’t, you’re almost certainly editing one config while the service is running another.
- Fix: rerun
equabot gateway install --forcefrom the same--profile/EQUABOT_STATE_DIRyou want the service to use.
equabot gateway status reports service config issues
- The supervisor config (launchd/systemd/schtasks) is missing current defaults.
- Fix: run
equabot doctorto update it (orequabot gateway install --forcefor a full rewrite).
Last gateway error: mentions “refusing to bind … without auth”
- You set
gateway.bindto a non-loopback mode (lan/tailnet/custom, orautowhen loopback is unavailable) but left auth off. - Fix: set
gateway.auth.mode+gateway.auth.token(or exportEQUABOT_GATEWAY_TOKEN) and restart the service.
equabot gateway status says bind=tailnet but no tailnet interface was found
- The gateway tried to bind to a Tailscale IP (100.64.0.0/10) but none were detected on the host.
- Fix: bring up Tailscale on that machine (or change
gateway.bindtoloopback/lan).
Probe note: says the probe uses loopback
- That’s expected for
bind=lan: the gateway listens on0.0.0.0(all interfaces), and loopback should still connect locally. - For remote clients, use a real LAN IP (not
0.0.0.0) plus the port, and ensure auth is configured.
Unauthorized: Gateway Token Mismatch
If you see this error when the CLI or an agent connects to the Gateway:- The Gateway validates incoming connections against
gateway.auth.token(the server-side secret). - The CLI sends
gateway.remote.token(the client-side secret) when connecting. - These two values must be identical. If they differ, the Gateway rejects the connection with
token_mismatch.
- The config was edited to change one token but not the other.
- A token rotation updated
gateway.auth.tokenbut forgot to updategateway.remote.token(or vice versa). - The config file was updated but the Gateway process is still running with the old config loaded at startup.
- Open
~/.equabot/equabot.jsonand verify both tokens match: - If the values already match on disk, the running Gateway may be stale. Check when it started:
If the start time predates your config change, restart the Gateway. Auth changes require a full Gateway restart (they are not hot-reloaded). See the hot reload matrix for details.
- Restart via the Equabot Mac app,
scripts/restart-mac.sh, or your platform’s service manager. - Verify:
- Token rotation checklist for the full rotation procedure.
gateway.remote.tokenis for remote CLI calls only; it does not enable local Gateway auth. Usegateway.auth.token(orEQUABOT_GATEWAY_TOKEN) for that.
Address Already in Use (Port 18789)
This means something is already listening on the gateway port. Check:Extra Workspace Folders Detected
If you upgraded from older installs, you might still have~/equabot on disk.
Multiple workspace directories can cause confusing auth or state drift because
only one workspace is active.
Fix: keep a single active workspace and archive/remove the rest. See
Agent workspace.
Main chat running in a sandbox workspace
Symptoms:pwd or file tools show ~/.equabot/sandboxes/... even though you
expected the host workspace.
Why: agents.defaults.sandbox.mode: "non-main" keys off session.mainKey (default "main").
Group/channel sessions use their own keys, so they are treated as non-main and
get sandbox workspaces.
Fix options:
- If you want host workspaces for an agent: set
agents.list[].sandbox.mode: "off". - If you want host workspace access inside sandbox: set
workspaceAccess: "rw"for that agent.
”Agent was aborted”
The agent was interrupted mid-response. Causes:- User sent
stop,abort,esc,wait, orexit - Timeout exceeded
- Process crashed
Agent failed before reply: Unknown model
This error means the gateway’s internal model registry does not recognize the model ID. The error is generated locally (not by the provider API). Common causes:- Older/insecure model: Equabot intentionally rejects some older models
vulnerable to prompt injection (e.g.,
claude-haiku-3-5). - Typo or unnormalized ID: Some short model names are auto-normalized
(e.g.,
claude-sonnet-4resolves toclaude-sonnet-4-20250514). If the name is not in the normalization table or the pi-ai catalog, the gateway rejects it. - Provider not configured: The provider prefix (e.g.,
minimax/) may not have a matching provider config or auth profile.
- Pick a latest model for the provider and update your config or model alias.
- Check the normalization table for your provider (e.g., Anthropic model ID normalization) to see if a shorter name auto-resolves.
- Run
equabot models listorequabot models scanto see supported models. - Check gateway logs for the detailed failure reason.
Messages Not Triggering
Check 1: Is the sender allowlisted?AllowFrom: ... in the output.
Check 2: For group chats, is mention required?
Pairing Code Not Arriving
IfdmPolicy is pairing, unknown senders should receive a code and their message is ignored until approved.
Check 1: Is a pending request already waiting?
dmPolicy isn’t open/allowlist for that channel.
Image + Mention Not Working
Known issue: When you send an image with ONLY a mention (no other text), WhatsApp sometimes doesn’t include the mention metadata. Workaround: Add some text with the mention:- ❌
@equabot+ image - ✅
@equabot check this+ image
Session Not Resuming
Check 1: Is the session file there?/new, /reset, or a reset trigger?
Stale Session Errors (sessions.resolve)
Symptom: Gateway logs show repeatedsessions.resolve failures:
~/.equabot/cron/jobs.json and continue resolving it after the session has been cleaned up.
Fix:
Step 1: Identify the stale key from logs:
Agent Timing Out
Default timeout is 30 minutes. For long tasks:process tool to background long commands.
WhatsApp Disconnected
Media Send Failing
Check 1: Is the file path valid?- Images: max 6MB
- Audio/Video: max 16MB
- Documents: max 100MB
High Memory Usage
Equabot keeps conversation history in memory. Fix: Restart periodically or set session limits:Common troubleshooting
“Gateway won’t start — configuration invalid”
Equabot now refuses to start when the config contains unknown keys, malformed values, or invalid types. This is intentional for safety. Fix it with Doctor:equabot doctorreports every invalid entry.equabot doctor --fixapplies migrations/repairs and rewrites the config.- Diagnostic commands like
equabot logs,equabot health,equabot status,equabot gateway status, andequabot gateway probestill run even if the config is invalid.
“All models failed” — what should I check first?
- Credentials present for the provider(s) being tried (auth profiles + env vars).
- Model routing: confirm
agents.defaults.model.primaryand fallbacks are models you can access. - Gateway logs in
/tmp/equabot/…for the exact provider error. - Model status: use
/model status(chat) orequabot models status(CLI).
I’m running on my personal WhatsApp number — why is self-chat weird?
Enable self-chat mode and allowlist your own number:WhatsApp logged me out. How do I re‑auth?
Run the login command again and scan the QR code:Build errors on main — what’s the standard fix path?
git pull origin main && pnpm installequabot doctor- Check GitHub issues or Discord
- Temporary workaround: check out an older commit
npm install fails (allow-build-scripts / missing tar or yargs). What now?
If you’re running from source, use the repo’s package manager: pnpm (preferred). The repo declarespackageManager: "pnpm@…".
Typical recovery:
How do I switch between git installs and npm installs?
Use the website installer and select the install method with a flag. It upgrades in place and rewrites the gateway service to point at the new install. Switch to git install:- The git flow only rebases if the repo is clean. Commit or stash changes first.
- After switching, run:
Telegram block streaming isn’t splitting text between tool calls. Why?
Block streaming only sends completed text blocks. Common reasons you see a single message:agents.defaults.blockStreamingDefaultis still"off".channels.telegram.blockStreamingis set tofalse.channels.telegram.streamModeispartialorblockand draft streaming is active (private chat + topics). Draft streaming disables block streaming in that case.- Your
minChars/ coalesce settings are too high, so chunks get merged. - The model emits one large text block (no mid‑reply flush points).
- Put block streaming settings under
agents.defaults, not the root. - Set
channels.telegram.streamMode: "off"if you want real multi‑message block replies. - Use smaller chunk/coalesce thresholds while debugging.
Discord doesn’t reply in my server even with requireMention: false. Why?
requireMention only controls mention‑gating after the channel passes allowlists.
By default channels.discord.groupPolicy is allowlist, so guilds must be explicitly enabled.
If you set channels.discord.guilds.<guildId>.channels, only the listed channels are allowed; omit it to allow all channels in the guild.
Fix checklist:
- Set
channels.discord.groupPolicy: "open"or add a guild allowlist entry (and optionally a channel allowlist). - Use numeric channel IDs in
channels.discord.guilds.<guildId>.channels. - Put
requireMention: falseunderchannels.discord.guilds(global or per‑channel). Top‑levelchannels.discord.requireMentionis not a supported key. - Ensure the bot has Message Content Intent and channel permissions.
- Run
equabot channels status --probefor audit hints.
Cloud Code Assist API error: invalid tool schema (400). What now?
This is almost always a tool schema compatibility issue. The Cloud Code Assist endpoint accepts a strict subset of JSON Schema. Equabot scrubs/normalizes tool schemas in currentmain, but the fix is not in the last release yet (as of
January 13, 2026).
Fix checklist:
- Update Equabot:
- If you can run from source, pull
mainand restart the gateway. - Otherwise, wait for the next release that includes the schema scrubber.
- If you can run from source, pull
- Avoid unsupported keywords like
anyOf/oneOf/allOf,patternProperties,additionalProperties,minLength,maxLength,format, etc. - If you define custom tools, keep the top‑level schema as
type: "object"withpropertiesand simple enums.
macOS Specific Issues
App Crashes when Granting Permissions (Speech/Mic)
If the app disappears or shows “Abort trap 6” when you click “Allow” on a privacy prompt: Fix 1: Reset TCC CacheBUNDLE_ID in scripts/package-mac-app.sh (e.g., add a .test suffix) and rebuild. This forces macOS to treat it as a new app.
Gateway stuck on “Starting…”
The app connects to a local gateway on port18789. If it stays stuck:
Fix 1: Stop the supervisor (preferred)
If the gateway is supervised by launchd, killing the PID will just respawn it. Stop the supervisor first:
equabot CLI is installed and matches the app version:
Debug Mode
Get verbose logging:Log Locations
| Log | Location |
|---|---|
| Gateway file logs (structured) | /tmp/equabot/equabot-YYYY-MM-DD.log (or logging.file) |
| Gateway service logs (supervisor) | macOS: $EQUABOT_STATE_DIR/logs/gateway.log + gateway.err.log (default: ~/.equabot/logs/...; profiles use ~/.equabot-<profile>/logs/...)Linux: journalctl --user -u equabot-gateway[-<profile>].service -n 200 --no-pagerWindows: schtasks /Query /TN "Equabot Gateway (<profile>)" /V /FO LIST |
| Session files | $EQUABOT_STATE_DIR/agents/<agentId>/sessions/ |
| Media cache | $EQUABOT_STATE_DIR/media/ |
| Credentials | $EQUABOT_STATE_DIR/credentials/ |
Health Check
Reset Everything
Nuclear option:Getting Help
- Check logs first:
/tmp/equabot/(default:equabot-YYYY-MM-DD.log, or your configuredlogging.file) - Search existing issues on GitHub
- Open a new issue with:
- Equabot version
- Relevant log snippets
- Steps to reproduce
- Your config (redact secrets!)
“Have you tried turning it off and on again?” — Every IT person ever 🌿🔧
Browser Not Starting (Linux)
If you see"Failed to start Chrome CDP on port 18800":
Most likely cause: Snap-packaged Chromium on Ubuntu.
Quick fix: Install Google Chrome instead: