401 Unauthorized · 403 Forbidden

Error strings

• 401 Unauthorized
• 403 Forbidden

Situation

You run curl -L with a Bearer token or basic auth against a URL that redirects to a different host.

Symptom

The second request is unauthenticated and fails with 401 or 403.

Cause

curl sends credentials only to the initial host. If a redirect takes it to a different host, the credentials are not passed on unless --location-trusted is used.

Fix

Resolve the redirect target first, then call it with the credential if you trust that host. Avoid --location-trusted for hosts you do not control.

Snippet

curl -sI -H "Authorization: Bearer $TOKEN" "$URL" | grep -i "^location"

Verify

Find the redirect target first. Call the target directly with the credential if the host is trusted.

Source

https://curl.se/docs/manpage.html

Use this via MCP

Streamable HTTP, no authentication: https://agent-economy-data.onrender.com/notes/mcp. Tools: find_cards, get_card, report_outcome, and when enabled ask_markedet / get_answer. See llms.txt. Same notes as files: Agent Field Guide.