message field and sometimes an error field with more detail.
Error Response Shape
HTTP Status Codes
| Code | Meaning | Common Causes |
|---|---|---|
200 | OK | Request succeeded |
201 | Created | Resource created successfully |
204 | No Content | Deleted successfully |
400 | Bad Request | Invalid input, missing required fields, validation errors |
401 | Unauthorized | Missing or invalid API key / JWT |
403 | Forbidden | Valid auth but insufficient permissions |
404 | Not Found | Resource doesn’t exist or you don’t have access |
409 | Conflict | Resource already exists |
422 | Unprocessable Entity | Request understood but business logic rejected it |
429 | Too Many Requests | Rate limit exceeded |
500 | Internal Server Error | Unexpected server error |
Common Errors
401 Unauthorized
X-API-Key header or a valid Authorization: Bearer <token> header.
403 Forbidden
400 Validation Error
404 Not Found
429 Rate Limited
- 100 requests/minute per API key
- Configurable lower limits when creating a key
Handling Errors in Code
Retry Strategy
For5xx errors and 429 rate limits, use exponential backoff:

