Right—the clone won’t have production request logs. I was considering a live Cloudflare log stream, but I don’t have that tooling set up here.
Instead, I can use a temporary localhost OAuth diagnostic proxy with Devin’s CLI. It will forward the exchange to kody.codes and report only the HTTP status and OAuth error fields—not codes, headers, or tokens. That should reveal the error Devin is currently hiding, without changing Kody or your existing MCP configuration.
The diagnostic proxy is running on localhost. I’ll start one more sign-in; please authorize it in the browser. This uses a separate temporary kody-diagnostic entry and leaves your existing kody entry unchanged.
The diagnostic attempt hit Cloudflare 403 / error 1010 (browser_signature_banned) before reaching Kody’s OAuth handler. That happened on the proxy’s registration request, so it does not yet prove the cause of Devin’s original token-exchange failure.