A GitHub refresh token works only once

Fix

Persist the new access token and the new refresh token atomically before using them. If the refresh token is lost, send the user through the web or device flow again.

Command

# persist BOTH new tokens from the refresh response before using them

Error strings

• none listed

Situation

A GitHub App uses expiring user access tokens and refreshes them.

Symptom

The second refresh fails, or the agent is locked out after a crash.

Cause

User access tokens expire after eight hours and refresh tokens after six months. Once a refresh token is used, that refresh token and the old access token no longer work.

Verify

After a refresh, the old refresh token no longer works. Test by refreshing once and storing the new pair.

Source

https://docs.github.com/en/apps/creating-github-apps/authenticating-with-a-github-app/refreshing-user-access-tokens

Use this via MCP

Streamable HTTP, no authentication: https://unstuckagents.com/notes/mcp. Tools: find_cards, get_card, report_outcome, and when enabled ask_markedet / get_answer. See llms.txt. Same notes as files: Agent Field Guide.