400 | Bad Request | Missing or invalid parameters |
401 | Unauthorized | Something is missing or stale; the body's error names it: no x-api-key header, SIGNATURE_REQUIRED, TIMESTAMP_REQUIRED, TIMESTAMP_EXPIRED (more than 5 minutes off), NONCE_REQUIRED, NONCE_INVALID (reused or shorter than 16) |
403 | Forbidden | Refused: SIGNATURE_INVALID, an unknown key (Invalid API key), a revoked or expired key (credential_expired), a key whose creator left the organization (credential_org_access_revoked), insufficient_scope, IP not allowed; on approvals also blocked, device_keys_lost and action_disabled |
404 | Not Found | No linked device found |
409 | Conflict | Secret already in use |
410 | Gone | Secret has expired |
423 | Locked | 2FA is frozen |
429 | Too Many Req | Rate limit exceeded |
500 | Server Error | Internal server error |
