Docs › Reference › Errors

Errors

HTTP status plus a machine-readable code.

Failed calls return a 4xx or 5xx status and JSON. Handle the code, not the wording of the message.

json

{
  "error": "AUTHENTICATION_REQUIRED",
  "message": "A short description of what went wrong."
}

Status

Status	Meaning
400	The request is missing a required field or is otherwise invalid.
401	No key, or a bad key.
403	Authenticated, but not allowed — including missing or invalid consent.
404	The record is not visible to your institution.
429	Too many requests. Wait, then retry. See rate limits.
5xx	Server error. Retry later.

Code	Typical cause
`AUTHENTICATION_REQUIRED`	Missing or invalid credentials.
`INSUFFICIENT_PERMISSIONS`	The key or user cannot call this route.
`CONSENT_REQUIRED`	Live scoring without an active consent.
`CONSENT_INVALID`	The consent id does not match this entity, purpose, or status.
`RATE_LIMITED`	Back off. Read `Retry-After` when present.

Last updated 14 September 2026