When you see an access or permission error

A page won't load or shows a "not allowed" error — usually because your session expired, you're trying to open something that isn't yours, or an MCP token was revoked.

What you're seeing

You open a page and see a "not allowed" or "forbidden" message, or you're silently sent back to the sign-in screen.

Why it happens

Ceum is single-user — everything you create belongs to just you — so there's no role hierarchy involved. The realistic reasons you'd see a permission error:

  • Your session expired. You were signed out and the page couldn't continue.
  • Wrong account. You're signed into a different account than the one that owns what you're trying to open. Easy to hit if you have more than one Ceum account.
  • Opening something that isn't yours. You followed a link to an item that exists but belongs to another account — usually a stale link, a teammate's screenshot, or a hand-edited address.
  • A revoked MCP token. A connected external tool is using a token that's been revoked or whose owner deleted their account. See CLI / MCP token issues.
  • An integration calling something unavailable. The token works, but it's trying to use a tool that doesn't exist or has been turned off.

There are no admin pages in Ceum — references to "admin pages" in older content no longer apply.

How to fix it

  1. Check that you're still signed in. Open any other page. If you get bounced to the sign-in screen, your session lapsed — sign back in.
  2. Confirm the account. Open Account settings and check the email; you may be on a secondary account.
  3. Don't trust the link. If you arrived from a link someone else shared, the item likely belongs to their account, not yours. Use Search or the list pages to find items you own.
  4. For integration problems, see CLI / MCP token issues — the dedicated guide for rotating, revoking, and checking tokens.

Tips and edge cases

  • There's no "share" feature. If a colleague sent you a Ceum link expecting you to see their data, that won't work — Ceum has no sharing model. The fix is to export and send.
  • The MCP events log helps track down integration problems. If a connected tool is being rejected, check Sessions and MCP events for the last successful call to pin down when access broke.

Related articles