Skip to main content

Error Codes

Error responses and handling guidance for the Security API

When a call fails, the service returns the following error structure, where request_id matches the x-request-id response header:
{
  "type": "error",
  "error": {
    "code": "405",
    "message": "Method not allowed"
  },
  "request_id": "82a2ff07-d30f-9905-b9d3-fa2d1c122e01"
}
Common error codes:
codeHTTP statusDescription
405405Method not allowed
400400Parameter validation failed; message gives the reason
InvalidApiKey401API Key missing or invalid (gateway layer)
Endpoint.AccessDenied403Workspace does not exist or is not accessible (gateway layer)
BadRequest.IllegalEndpoint400Workspace route is invalid (gateway layer)
Authentication and workspace-routing errors are returned directly by the gateway in a flat {"request_id", "code", "message"} structure; business errors are returned by the service, with the error code in error.code.
Common HTTP status codes:
HTTP statusDescription
400Missing parameter, malformed format, or value out of range
401Invalid API Key
403No access to the workspace
404Resource not found
405Method not allowed
500Internal service error
When troubleshooting, use request_id to locate the specific request. After resolving errors, continue with the endpoint documentation in the Overview.