no accounts authorized | Nothing stored yet | setup.md |
no OAuth client stored | Gmail used before set-client | mailkit auth set-client <client.json> |
no token for … | Account missing or half-registered | mailkit auth add … for that provider |
| Outlook consent says “Need admin approval” | Tenant restricts third-party apps | Ask IT to allow mailkit, then re-run mailkit auth add --provider outlook |
Outlook token expired for … | 90 days of inactivity, or consent revoked | mailkit auth add --provider outlook you@outlook.com again |
mailkit has no Outlook app id in this build | Build shipped without the Entra app id | mailkit auth set-outlook-app <client_id>, or install a release that has one |
Outlook 403 “scope not granted” | Consent granted less than mailkit needs | mailkit auth add --provider outlook you@outlook.com again |
Outlook 429 / slow bulk organize | Microsoft Graph throttling | mailkit honours Retry-After up to 3 tries. Wait, then retry a smaller batch. |
invalid_grant / doctor FAIL on Gmail | Refresh token revoked or expired | mailkit auth add you@gmail.com again. Publish the OAuth consent screen to Production. |
| Fastmail doctor FAIL | Token revoked or mistyped | Mint a new Mail token; auth add --provider fastmail |
Bridge is not reachable / Proton doctor FAIL | Bridge not running, or wrong port | Open Proton Mail Bridge, sign in, retry |
Bridge password rejected | Not the mailbox password | Copy the Bridge mailbox password, not the Proton login |
Bridge certificate changed | Bridge cert rotated | mailkit auth add --provider protonmail you@proton.me again |
'send' is not supported on fastmail | Wrong account | Use a Gmail, Outlook, or Proton Mail -a |
'thread' is not supported on protonmail | Verb is Gmail-only | Use read / show |
'label' is not supported on outlook | Graph has folders, not Gmail labels | Use archive / trash, or a Gmail account |
| Outlook attachment refused before send | Over the 3 MB inline cap | Send a link, or split the file. Nothing was sent. |
UnsupportedQuery | Search syntax this provider does not compile | See read.md |
refusing to send without --yes | Missing flag | Get a human yes, then add --yes |
--attach can't be combined with --draft | Flag mix | Attach when drafting, or send a new message |
403 accessNotConfigured | Gmail API not enabled | Enable Gmail API on the Google Cloud project |
| Google “app not verified” | You are on a BYO client override, not mailkit’s verified one | Check with mailkit auth client; auth unset-client returns to the shipped client |
| Keychain / “no accounts” in a sandbox | Agent sandbox blocked Keychain | Run mailkit unsandboxed |
