diff --git a/decnet/templates/imap/server.py b/decnet/templates/imap/server.py
index f406f985..41c5b239 100644
--- a/decnet/templates/imap/server.py
+++ b/decnet/templates/imap/server.py
@@ -639,7 +639,7 @@ class IMAPProtocol(asyncio.Protocol):
             if sub_cmd == "FETCH":
                 self._cmd_fetch(tag, sub_args, use_uid=True)
             elif sub_cmd == "SEARCH":
-                self._cmd_search(tag, uid_mode=True)
+                self._cmd_search(tag, _uid_mode=True)
             else:
                 self._w(f"{tag} BAD Unknown UID sub-command\r\n")
 
@@ -734,7 +734,7 @@ class IMAPProtocol(asyncio.Protocol):
                 self._transport.write(_build_fetch_response(seq, emails[seq - 1], items))
         self._w(f"{tag} OK FETCH completed\r\n")
 
-    def _cmd_search(self, tag: str, uid_mode: bool = False) -> None:
+    def _cmd_search(self, tag: str, _uid_mode: bool = False) -> None:
         if self._state != "SELECTED":
             self._w(f"{tag} BAD Not in selected state\r\n")
             return
diff --git a/decnet/ttp/store/impl/filesystem.py b/decnet/ttp/store/impl/filesystem.py
index 941cfbf1..c8da6283 100644
--- a/decnet/ttp/store/impl/filesystem.py
+++ b/decnet/ttp/store/impl/filesystem.py
@@ -292,7 +292,7 @@ class FilesystemRuleStore(RuleStore):
 
     async def __aexit__(
         self,
-        exc_type: Type[BaseException] | None,
+        _exc_type: Type[BaseException] | None,
         exc: BaseException | None,
         tb: TracebackType | None,
     ) -> None:
diff --git a/decnet/web/router/canary/api_tokens.py b/decnet/web/router/canary/api_tokens.py
index 82043c93..939a8aae 100644
--- a/decnet/web/router/canary/api_tokens.py
+++ b/decnet/web/router/canary/api_tokens.py
@@ -211,7 +211,7 @@ async def api_list_tokens(
     state: str | None = Query(default=None),
     kind: str | None = Query(default=None),
     topology_id: str | None = Query(default=None),
-    viewer: dict = Depends(require_viewer),
+    _viewer: dict = Depends(require_viewer),
 ) -> CanaryTokensResponse:
     rows = await repo.list_canary_tokens(
         decky_name=decky_name, state=state, kind=kind,
@@ -234,7 +234,7 @@ async def api_list_tokens(
 )
 async def api_get_token(
     uuid: str,
-    viewer: dict = Depends(require_viewer),
+    _viewer: dict = Depends(require_viewer),
 ) -> CanaryTokenResponse:
     row = await repo.get_canary_token(uuid)
     if row is None:
@@ -320,7 +320,7 @@ async def api_list_triggers(
     uuid: str,
     limit: int = Query(default=100, ge=1, le=500),
     offset: int = Query(default=0, ge=0),
-    viewer: dict = Depends(require_viewer),
+    _viewer: dict = Depends(require_viewer),
 ) -> CanaryTriggersResponse:
     row = await repo.get_canary_token(uuid)
     if row is None:
diff --git a/decnet/web/router/deckies/api_tarpit.py b/decnet/web/router/deckies/api_tarpit.py
index b3d76890..2a30449b 100644
--- a/decnet/web/router/deckies/api_tarpit.py
+++ b/decnet/web/router/deckies/api_tarpit.py
@@ -168,7 +168,7 @@ async def api_enable_tarpit(
 )
 async def api_get_tarpit(
     decky_name: str = Path(..., pattern=_DECKY_RE),
-    viewer: dict = Depends(require_viewer),
+    _viewer: dict = Depends(require_viewer),
 ) -> TarpitStatusResponse:
     rule = await repo.get_tarpit_rule(decky_name)
     if rule is None:
diff --git a/decnet/web/router/topology/api_tarpit.py b/decnet/web/router/topology/api_tarpit.py
index a65c9935..00aa8f92 100644
--- a/decnet/web/router/topology/api_tarpit.py
+++ b/decnet/web/router/topology/api_tarpit.py
@@ -123,7 +123,7 @@ async def api_enable_tarpit(
 async def api_get_tarpit(
     topology_id: str = Path(..., pattern=_TOPO_RE),
     decky_name: str = Path(..., pattern=_DECKY_RE),
-    viewer: dict = Depends(require_viewer),
+    _viewer: dict = Depends(require_viewer),
 ) -> TarpitStatusResponse:
     db_key = _db_key(topology_id, decky_name)
     rule = await repo.get_tarpit_rule(db_key)