Mintplex-Labs/anything-llm · error

User is suspended from system

Error message

User is suspended from system

What it means

Account-state guard in validBrowserExtensionApiKey: multi-user mode is on, the key is valid, and the owning user exists, but user.suspended is true, so the suspended account's extension requests are refused with 401.

Source

Thrown at server/utils/middleware/validBrowserExtensionApiKey.js:38

  const apiKey = await BrowserExtensionApiKey.validate(bearerKey);
  if (!apiKey) {
    response.status(403).json({
      error: "No valid API key found.",
    });
    return;
  }

  if (multiUserMode) {
    const user = await User.get({ id: apiKey.user_id });
    if (!user) {
      response.status(403).json({
        error: "User not found.",
      });
      return;
    }

    if (user.suspended) {
      response.status(401).json({
        error: "User is suspended from system",
      });
      return;
    }

    response.locals.user = user;
  }

  response.locals.apiKey = apiKey;
  next();
}

module.exports = { validBrowserExtensionApiKey };

View on GitHub (pinned to 3aec848f28)

Solutions

1. Have an administrator unsuspend the user account in the user management settings.
2. Use credentials of a non-suspended user.

When it happens

Trigger: Suspended user attempted to authenticate via browser extension API key. Triggered when the resolved user account is suspended (validBrowserExtensionApiKey.js:38).

Common situations: See trigger scenarios.

AI-assisted analysis of Mintplex-Labs/anything-llm@3aec848f28 (2026-08-18). Data as JSON: /api/errors/d128ba1c4a06b019. Report an issue: GitHub.