Problem type

CSRF validation failed

Code: csrf_failure
HTTP status: 403 Forbidden
Retry: Only after a fix

typehttps://api.tobie.team/problems/csrf_failure

What it means

A browser request that uses a session cookie failed its cross-site check.

Common causes

A form or script posted to a Tobie page without the anti-forgery token.
The session expired in another tab.

What to do

Reload the page and try again. API clients should never see this: send a bearer credential, not a cookie.

Retry: only after a fix. The same request fails the same way until you change the request, the credential or the resource.

Over MCP, the same failure is a tool result with isError: true, the code csrf_failure and retryable: false.

Example

A response body for this problem. The detail and instance vary with the request.

application/problem+json

{
  "type": "https://api.tobie.team/problems/csrf_failure",
  "title": "CSRF validation failed",
  "status": 403,
  "detail": "CSRF validation failed",
  "code": "csrf_failure",
  "instance": "/v1/tasks",
  "requestId": "01JC0S7Z5F3X9QK2M4N6P8R0TV"
}