Cairn
NousResearch/hermes-agent

Misleading API-key error messages for proxy/WAF 403 responses

Cluster 53099 · agent. Data as of

Nothing open on GitHub. Fix merged in #115812 on 19 Sep 2026. Check it covers your case.

The short answer

0open issues
0open PRs
3items grouped
Known?
Yes. 3 related items grouped here, 1 issue already closed.
Fix event
A fix was merged to main in PR #115812. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this resolved, deciding PR #115812. That is separate from the fix event.
Still open
Nothing open on GitHub.

The members concern 403 responses from a proxy, WAF, or relay being reported as an API-key rejection rather than a firewall or request block. One also mentions anthropic_messages routes sending custom extra_headers, and one is a bug report involving a relay blocking an OpenAI/Python User-Agent.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #115812 fix(providers): WAF 403s report as a firewall block, not a rejected key; anthropic_messages routes send custom extra_headers (#24293, #9721, #53099, #70566, salvage #46002 #70567 #53114)

    merged to main

    files: agent/agent_runtime_helpers.py, agent/anthropic_adapter.py, agent/error_classifier.py, agent/error_surface.py, agent/turn_failure_copy.py, agent/turn_recovery.py, apps/desktop/src/i18n/en.ts, apps/desktop/src/lib/error-surface.test.ts, apps/desktop/src/lib/error-surface.ts, cli.py, cron/scheduler_failure_copy.py, hermes_cli/cli_chat_error_copy.py, tests/agent/test_anthropic_adapter_extra_headers.py, tests/agent/test_error_classifier.py, tests/agent/test_error_classifier_upstream_blocked.py, tests/agent/test_run_agent_codex_responses.py, tests/cron/test_cron_failure_notice_copy.py, tests/hermes_cli/test_single_query_exit_contract.py, tui_gateway/user_messages.py, ui-tui/src/app/userMessages.ts (+1 more)

1 PR closed without merging

From the close comments: merged via another change 1

  • #53114 fix(agent): don't mislabel a proxy/WAF 403 block as an API-key rejection · merged via another change → cb062f7, #115812, #24293, #9721, #53099, #70566, #46002, #70567, #53114
Closed issues · 1
  • Closed#53099[Bug]: Misleading API key rejection message when custom OpenAI-compatible relay blocks OpenAI/Python User-Agent
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Merged PRs
#115812
Closed issues
1
Attempts
1 PR closed without merging
Fix link checked
19 Sep 2026

For your agent

The same facts, typed.

cluster/53099.json
cluster/53099.md