Recurring "required role (viewer)" error on Claude MCP connection despite Admin/workspace:member access

4 hours ago

Workspace: my personal workspace (Hobby plan, single member/Admin). Project: desirable-appreciation.

I'm experiencing a recurring OAuth permission error when Claude's MCP connector tries to access this project: "You don't have the required role (viewer) on this resource." This has happened 4 times so far (September 10, 12, 13, and 15, 2026), each time only resolved by fully disconnecting and reconnecting the Claude integration, then recurring again within 1-3 days.

This doesn't match my actual account configuration: my workspace role is Admin (sole member of a personal workspace). The Claude OAuth app's authorized grant shows workspace:member access scope, applied to "All workspaces" (current and future), authorized about 1 month ago with no changes since. No project-level role override exists; project access is inherited entirely from workspace role.

Given the grant on file is broader than Viewer and hasn't changed, I don't believe this is a permissions issue on my end. I suspect it may be a refresh-token handling issue on the OAuth session (possibly related to refresh token rotation/revocation behavior), but I don't have access to my own OAuth grant history or audit logs to confirm (Hobby plan, 48-hour retention).

Separately, I also have three manually-created personal API tokens named for Claude (Claude2, Claude-API-Access, claude) that may be legacy from an earlier setup, I'm not certain if any of these are still in use or could be conflicting with the OAuth connector.

Could you check the OAuth session/token refresh history for this connection on your end?

$10 Bounty

0 Replies

Railway
BOT

4 hours ago

This thread has been opened as a bounty so the community can help solve it.

Status changed to Open Railway about 4 hours ago


Welcome!

Sign in to your Railway account to join the conversation.

Loading...