# plaintext-refused

`https://ckrets.ai/problems/plaintext-refused` is a problem type of the ckrets.ai API (RFC 9457: the body is
`application/problem+json` with `type`, `title`, `status` and `detail`; every problem from `/v1` also carries `requestId`).

| Status | Also in the answer | What to do |
|---|---|---|
| 400 | - | the key requires client encryption (`clientEncryptionRequired`, set at mint or with `PATCH /v1/me/key`) and this value would reach ckrets in the clear: encrypt it on your side and send `clientEncrypted: true` with its `wrappedKey` ([client encryption](/docs/client-encryption.md)); the helper and the SDKs do it. Through MCP, use the local helper (`npx @ckrets/mcp`), not the hosted server. Nothing was made or counted |

Every type, with its retry rule and headers: [limits.md, "Errors, retries and headers"](/limits.md#errors-retries-and-headers).