plaintext-refused

A problem type of the ckrets.ai API, answered with 400. The answer is application/problem+json (RFC 9457) with type https://ckrets.ai/problems/plaintext-refused, title, status, detail and requestId. Branch on type, never on title.

#400: fix the request

The key requires client encryption (clientEncryptionRequired, set at mint or with PATCH /v1/me/key) and this value would reach ckrets in the clear: encrypt it on your side and send clientEncrypted: true with its wrappedKey (client encryption); the helper and the SDKs do it. Through MCP, use the local helper (npx @ckrets/mcp), not the hosted server. Nothing was made or counted.

#More

• Every type, grouped by what to do: error types.
• The retry rules and headers: limits.
• This page for agents, as Markdown: /problems/plaintext-refused.md.