Error text / 报错原文
MFA requiredtwo-factor authentication requiredapprove sign in
What it means
The workflow requires human approval, so the agent should hand control to the user and resume after approval.
Most common causes
- Enterprise SSO policy
- New browser fingerprint
- Risk-based login challenge
- Missing trusted device cookie
Fastest fix
- Reproduce the smallest failing case outside the agent.
- Confirm auth, session, and transport before changing app code.
- Disable unrelated tools or servers and retry once.
- Capture the exact timestamp, client version, and raw error text.
Safe fix
- Keep secrets in environment variables or the platform secret store.
- Use least-privilege scopes and read-only tools by default.
- Add validation around manifests, schemas, and callback URLs.
- Document the working local and production configuration.
What not to do
- Do not paste OAuth tokens or session IDs into public logs.
- Do not bypass TLS, CSP, or permission prompts as a permanent fix.
- Do not enable every MCP tool globally just to make one task pass.
Diagnostic commands
node --version npx @playwright/mcp@latest --help curl http://127.0.0.1:9222/json/version