Provider connection help

Connection problems

What you see	What it usually means	What to do
Secure setup link expired or was already used	The one-time setup ended.	Start a new secure setup. The old link cannot be recovered.
`authentication`	The provider rejected the credential.	Create a replacement at the provider, complete a new secure setup, then rotate the connection.
`permission`	The provider account cannot read or invoke the selected resource.	Grant the required provider permission, then test again.
`model_not_found`	The model, project, region, or profile does not match the account.	Check those values at the provider, then test again.
`rate_limited`	The provider account is receiving requests too quickly.	Wait, then test again.
`capacity`	The selected provider route has no capacity now.	Wait and retry, or add another eligible catalog model. Millwork chooses among ready models.
`source_5xx`	The provider returned a server error.	Retry later. Contact support if it continues.
Test succeeds but the catalog is empty	The account has no route Millwork currently supports.	Refresh models once. If it remains empty, contact support.
Bedrock returns `403` or cannot confirm the profile	Region, profile, key, or permission does not match.	Confirm the region and inference profile, plus permission to read and invoke through that profile.

Rotate or revoke

Test the replacement before changing the connection. If rotation fails, the current connection remains unchanged.

Revoking the Millwork connection stops future Millwork use. It does not revoke the credential at the provider. Revoke or rotate it there as well.

Replace a provider key

Follow the safe replacement order.

Send the connection ID and safe error reason, never the credential.