Paranoid mode is enabled, refusing to install…

Error message

Paranoid mode is enabled, refusing to install community-developed plugin

What it means

When installing a community-developed vfox plugin, mise warns that the code is third-party. If the `paranoid` setting is enabled, it refuses to even prompt, bailing with this message instead of asking for confirmation.

Solutions

Review the plugin's source, then install it with paranoid mode disabled for that one command: `MISE_PARANOID=1=false` equivalent — set `paranoid = false` in ~/.config/mise/config.toml.
Prefer an official/core plugin or a different backend (e.g. aqua/github backend) that doesn't require the community prompt.
Vet and fork the plugin yourself and install from your own repository.

Example fix

// before (~/.config/mise/config.toml)
paranoid = true
// after
paranoid = false  # or: MISE_PARANOID=0 mise install nodejs

Defensive patterns

Strategy: fallback

Try / catch

try {
  await $`mise plugin add ${name} ${url}`;
} catch (e) {
  if (String(e).includes('Paranoid mode'))
    console.error('Disable paranoid mode or use an official plugin:', e.message);
  throw e;
}

Prevention

Check whether the plugin is official/community before enabling paranoid mode.
Document the paranoid setting for your team so installs are not surprising.
Prefer core plugins or aqua/github backends in hardened environments.

When it happens

Trigger: Running `mise install <plugin>` / `mise plugin add <name> <git-url>` for a plugin that is not officially maintained, with `paranoid = true` in settings (or MISE_PARANOID=1).

Common situations: Corporate/security-hardened environments that enable paranoid mode; users who enabled paranoid mode earlier and forgot when adding a community plugin from the vfox registry.

Understand the failure class

Background: "You do not have permission" / 403 Forbidden errors: authenticated but not allowed — causes and fixes across open-source libraries — this error's family across 31 libraries.

Related errors

AI-assisted analysis of jdx/mise@533346cc37 (2026-09-17). Data as JSON: /api/errors/13a7fb1a3ff32916. Report an issue: GitHub.

Appendix: source

Thrown at src/plugins/vfox_plugin.rs:335

            return Ok(());
        }

        let settings = Settings::try_get()?;
        if !force {
            if self.is_installed() {
                return Ok(());
            }
            if !settings.yes && self.repo_url.lock().unwrap().is_none() {
                let url = self.get_repo_url(config)?;
                let url_string = url.to_string();
                if !registry::is_trusted_plugin(self.name(), &url_string) {
                    warn!(
                        "⚠️ {} is a community-developed plugin – {}",
                        style(&self.name).blue(),
                        style(&url_string.trim_end_matches(".git")).yellow()
                    );
                    if settings.paranoid {
                        bail!(
                            "Paranoid mode is enabled, refusing to install community-developed plugin"
                        );
                    }
                    if !prompt::confirm_with_all(format!(
                        "Would you like to install {}?",
                        self.name
                    ))?
                    .is_yes()
                    {
                        Err(PluginNotInstalled(self.name.clone()))?
                    }
                }
            }
        }

        let prefix = format!("plugin:{}", style(&self.name).blue().for_stderr());
        let pr = mpr.add_with_options(&prefix, dry_run);
        if !dry_run {

View on GitHub (pinned to 533346cc37)