Can't authorize your AI
On this page
You started connecting Pennyweight from your AI, and the Pennyweight page that should approve it showed a message instead of sending you back. Each message points to a specific fix. For the normal flow, see connect your AI.
What you'll see
The page can stop you in two places.
Before you enter your passphrase. A red card titled MCP authorization replaces the form, and there is no Authorize button:
- "Missing
redirect_uri— your MCP client didn't pass it. Try removing and re-adding the Pennyweight MCP server in your client." - "This connection wants to send your authorization to" an address, "which isn't a recognized Pennyweight AI client. For your security we won't continue."
- "This connection didn't use a secure authorization handshake (PKCE). Pennyweight requires it."
After you select Authorize. A red line appears under the passphrase field:
- "AI access uses the same two-factor protection as bank connections. Set it up once in Settings → Security — about a minute with any authenticator app — then retry here."
- "Wrong passphrase, or your data couldn't be unwrapped."
- A message that ends "this is a data problem on our side, not your passphrase. Please contact support."
- "Authorization did not produce a redirect — PKCE is required. Reconnect from your AI client."
Server error:followed by a number.
Why it happens
- Two-factor is off. Pennyweight's server answers
MFA_REQUIRED(a 403) when your account has no verified second factor. The page shows the two-factor message for any 403 from the server. - Your passphrase didn't unlock your data. The page checks your passphrase before it asks the server to authorize the connection. If you see the two-factor message, your passphrase was accepted.
- Your AI app isn't one Pennyweight accepts. Pennyweight sends the approval back only to Claude, ChatGPT, Gemini or Grok, or to an address on your own computer, which some desktop and command-line tools use. The card names the address it refused.
- Your AI client started the connection without the details Pennyweight requires. That covers the missing
redirect_uricard, the PKCE card and the "did not produce a redirect" message. - Your account data has a problem. The "data problem on our side" messages mean a key Pennyweight stores for you is missing or won't open. Your passphrase isn't the cause.
- You haven't finished setting up Pennyweight. The page sends you to account setup instead of authorizing.
How to fix it
- For the two-factor message, go to Settings → Security, find Two-factor authentication and select Manage. See turn on two-factor authentication. Then come back and select Authorize again.
- For a wrong passphrase, type it again and select Authorize. If you've forgotten it, reset it with your recovery code from the unlock page first. See forgot your passphrase.
- For any red card, or a PKCE or redirect message, remove Pennyweight from your AI app, add it again, and start the connection from the app. The steps for each app are in connect your AI. If your app isn't Claude, ChatGPT, Gemini or Grok, check connect another AI client.
- For a "data problem on our side" message, contact support at pennyweight.ai/contact.
- For
Server error:with a number, try again. If it keeps happening, contact support.
Good to know
- Just turned on two-factor and still blocked? Pennyweight can remember the last check for up to a minute. Wait a minute and select Authorize again.
- The red card names Claude and ChatGPT only. Gemini and Grok are accepted as well.
- The page asks for your passphrase every time. Each authorization unlocks your data for that connection. Authorize stays off until you type something.
- Check the account. The page shows the email of the Pennyweight account you're signed in to. If you aren't signed in, it sends you to sign in first.
- Connected before and now your AI can't reach Pennyweight? That's a different problem. See your AI lost access and manage AI access.