
When the GitHub plugin says Needs auth but has no sign-in link
Use this when the GitHub plugin in Grok Bot desktop stays on Needs auth with no sign-in link. On Grok Bot desktop, the official GitHub marketplace plugin can stay on Needs auth. Clicking Authenticate may toast “Github didn’t provide a sign-in link” (or later “Couldn’t start sign-in… fetch failed”) with no browser window. Staff (mohitjain, Sep 8, 2026) said this is often a labeling issue: the plugin authenticates with the personal access token you enter under Setup Values (Edit Values). Authenticate looks for a browser OAuth URL that this plugin never issues, so the badge stays noisy while tools already work. Thread: forum 170898.
Confirm the connector already works
- Open Settings → Plugins (xAI's docs call this Marketplace → Your plugins), then open GitHub under Installed (cursor.com/docs/grok-bot/work, checked 2026-09-25; docs.x.ai/grok-bot/settings-and-notifications, checked 2026-09-25; docs.x.ai/grok-bot/troubleshooting, checked 2026-09-25).
- Under Setup Values / Edit Values, confirm a PAT is saved for the account row (often labeled
default). - In any Bot, ask:
Using the GitHub connector, which GitHub user am I signed in as? - If it returns your username and GitHub tools respond, ignore the Needs auth badge for now. Staff are tracking the label.
You do not need a second custom “github-local” PAT MCP while the marketplace tools are loading with your token.
If tools actually fail
- Re-open Edit Values, paste a fresh classic or fine-scoped PAT with the scopes the plugin asks for, save, and retry the “which user am I” check.
- Uninstall → reinstall the marketplace GitHub plugin only after the PAT path fails — OP saw the toast text change to fetch failed after that cycle; treat that as a separate network/sign-in path staff still want reports on.
- For Cursor IDE’s GitHub auth screen, staff asked for a separate screenshot; that path is not the same as Bot Setup Values.
- Consumer grok.com GitHub OAuth is a different product surface: Connect GitHub so Grok can search repos, issues, and PRs.
Related
- All how-tos: How-to index.
- Same symptom for Todoist: When desktop Todoist Authenticate never opens a browser.
- When a connector stays on Needs auth: When MCP stays Needs auth after Authenticate.
Pitfalls
- Chasing a browser OAuth window that this plugin never opens when a PAT is the real credential.
- Rotating the PAT in chat instead of Setup Values.
- Distinct from MCP
needsAuthafterAuthenticateMcpServeron other remotes, and from stdio secrets tied to a deleted agent.