
Grok Bot
When the GitHub plugin says Needs auth but has no sign-in link
When the GitHub plugin says Needs auth but has no sign-in link
On Grok Bot desktop, the official GitHub marketplace plugin can stay on Needs auth. Clicking Authenticate may toast “Github didn’t provide a sign-in link” (or later “Couldn’t start sign-in… fetch failed”) with no browser window. Staff (mohitjain, Sep 8, 2026) said this is often a labeling issue: the plugin authenticates with the personal access token you enter under Setup Values (Edit Values). Authenticate looks for a browser OAuth URL that this plugin never issues, so the badge stays noisy while tools already work. Thread: forum 170898.
Confirm the connector already works
- Open Settings → Plugins → GitHub.
- Under Setup Values / Edit Values, confirm a PAT is saved for the account row (often labeled
default). - In any Bot, ask:
Using the GitHub connector, which GitHub user am I signed in as? - If it returns your username and GitHub tools respond, ignore the Needs auth badge for now. Staff are tracking the label.
You do not need a second custom “github-local” PAT MCP while the marketplace tools are loading with your token.
If tools actually fail
- Re-open Edit Values, paste a fresh classic or fine-scoped PAT with the scopes the plugin asks for, save, and retry the “which user am I” check.
- Uninstall → reinstall the marketplace GitHub plugin only after the PAT path fails — OP saw the toast text change to fetch failed after that cycle; treat that as a separate network/sign-in path staff still want reports on.
- For Cursor IDE’s GitHub auth screen, staff asked for a separate screenshot; that path is not the same as Bot Setup Values.
- Consumer grok.com GitHub OAuth is a different product surface: Connect GitHub so Grok can search repos, issues, and PRs.
Pitfalls
- Chasing a browser OAuth window that this plugin never opens when a PAT is the real credential.
- Rotating the PAT in chat instead of Setup Values.
- Distinct from MCP
needsAuthafterAuthenticateMcpServeron other remotes, and from stdio secrets tied to a deleted agent.