Troubleshooting
Find the symptom you are seeing and jump to the section that explains it. Most answers live on the feature page they belong to, so each link lands on the exact heading rather than repeating the explanation here.
In-depth guides
Install and platform
Deployment, permissions on first run, TLS interception, and keeping the container image up to date.
Installation
- My Marketplace deployment failed
- The placeholder page shows an error or never loads
- The application deploy script failed in Cloud Shell
- The deploy command is missing from the placeholder page, or Azure rejects it
- The script cannot find or select my subscription
- Admin consent was not granted for the app registration
- The wizard rejects my company name or region
External API
Token requests that fail, 401 and 403 responses from the REST API, and parameter errors on scan pairs, time windows and lists.
External API: Authentication, Permissions & Errors
- The token request fails with a consent error (for example AADSTS65001)
- 401 Authentication failed after az login --service-principal or --identity
- 401 from a custom app
- 401 on every call, and administrators see the migration banner
- 401 with az rest against an http:// address
- 403 "External API access is disabled by your StratoLens administrator."
- 403 "Client <id> is not a trusted client for this StratoLens installation."
- 403 "This route is not available through the external API."
- 403 "Your StratoLens administrator has not granted you external API access."
- 403 "Access denied"
- 403 "You do not have permission to search <destination>." or "...realized savings recommendations."
- A browser app fails with a CORS error
- 400 "time window must not exceed 366 days"
- 400 "<name> must list at most 200 values"
- 404 "Base scan with ID '…' not found."
- 400 "Base scan '…' must be older than compare scan '…'."
- 500 on a single-scan route with a plausible scanId
MCP Server
AI assistant sign-in failures, refusals from StratoLens settings, tool errors, and answers that differ from the StratoLens pages.
MCP Server: Troubleshooting
- Allow MCP connections is grayed out
- I can't see the MCP server URL
- I can't see Add client
- VS Code shows Need admin approval, then waits for the server to respond
- VS Code logs "retrying with new auth registration" or "Cannot force new registration"
- Claude, Claude Code or ChatGPT sign-in fails with AADSTS9010010
- Verify says the MCP server URL is missing
- The client keeps asking me to sign in, or reports Authentication failed
- The client can't find where to sign in
- The URL in my client differs from the Security card
- "External API access is disabled by your StratoLens administrator."
- "Client <id> is not a trusted client for this StratoLens installation."
- "MCP connections are disabled by your StratoLens administrator."
- "Your StratoLens administrator has not granted you external API access."
- "The MCP endpoint accepts external_read tokens only."
- "Missing permission <id>" from a tool
- "Rate limit of <n> tool calls per minute reached."
- "The tool did not finish within 60 s."
- "Result is <n> KB, over the 200 KB budget."
- "No completed scan exists yet" or "Scan not found"
- "Input validation error" or another message about the arguments
- "Your data scope could not be resolved, so no data can be returned."
- "The tool failed unexpectedly."
- The assistant's numbers differ from the page
- The assistant doesn't know about a change I just made
- Rows repeat or go missing while the assistant pages
- The assistant says it can't change something
Scanning and change tracking
Scans that fail, stall, or return less than you expected, and diffs that show too much or too little.
Change Logs
- Clicking a subscription expanded its children but didn't show its own changes
- The Property Changes table says "Resource state details are not available for this change record"
- The page shows "Something went wrong with Resource Changes"
- The detail panel says "No changes found for X in selected time range"
Cost and commitments
Cost totals that do not reconcile, missing anomalies, and reservation or savings plan coverage gaps.
Using Cost Explorer
- A subscription is missing from column 1
- The Forecast button is missing
- A custom date range got shortened
- A recently added tag is not in the filter dropdown
- The page is empty or says "No subscriptions found"
- Resources appear in "Purchases" that aren't in the Azure portal
- Why do my reservation-covered VMs show $0?
- My subscription totals changed when I toggled Amortize. Which is correct?
- I see a "Covered by" badge but the Amortize toggle is off, is that a bug?
Recommendations and optimization
Recommendations that never appear, never change, or disagree with what you see in Azure.
Dashboards and widgets
Widgets that read zero, disappear, or disagree with the detail page behind them.
Exploring your estate
Empty result sets, missing resources, and filters or snapshots that behave unexpectedly.
Access, roles, and audit
Principals that do not appear, permissions that do not take effect, and audit entries you cannot find.
Email and reports
Test sends that fail, alerts that never arrive, and schedules that do not advance.