Reference · Error codes

HSX_E_CLOUDFLARE_OAUTH_STATE_MISMATCH

OAuth state mismatch.

What this error means

The callback `state` did not match the value HS-X sent — possible CSRF.

When this error stops a command, hs-x exits with code 10. With --json, the failure is reported as a structured error whose code field is HSX_E_CLOUDFLARE_OAUTH_STATE_MISMATCH — stable to match on in scripts and agents.

Likely causes

  • Replay of an old callback URL
  • Two concurrent OAuth flows on the same machine

How to fix it

  • Re-run hs-x connect cloudflare --auth-method oauth and use the newest browser tab

Still stuck? Re-run the command with --debug for the wire-level detail, or hs-x doctor to check accounts, link state, and connectivity in one pass.

Keep going