Google refresh token dies every 7 days with invalid_grant

invalid_grant

Verified 2026-08-11 · Confirmed by 0 builders · Trust 50/100

Cause

While the OAuth consent screen's publishing status is Testing, Google expires refresh tokens after 7 days.

Fix

Publish the consent screen to Production. For a private app this shows an unverified app warning once at sign-in, which is acceptable. If invalid_grant appears on a published app, the token was revoked; mint a new one.

Apply

Google Cloud console > Google Auth Platform > Audience > Publish app (older console layout: APIs & Services > OAuth consent screen)

Affects: Google OAuth 2.0, June to August 2026

Have your agent know this before it fails

claude mcp add --transport http footgun https://getfootgun.com/api/mcp