success field is false and an error message is included.
Error response structure
HTTP status codes
| Status | Meaning |
|---|---|
200 | Success |
201 | Resource created |
400 | Bad request — missing or invalid parameters |
401 | Unauthenticated — missing or invalid token |
403 | Forbidden — valid token but insufficient permissions |
404 | Resource not found |
422 | Validation error — request data failed validation |
429 | Rate limited |
500 | Server error |
Validation errors
When validation fails, the response includes a field-levelerrors object:
Error codes
Some endpoints return a machine-readableerror_code for programmatic handling:
| Code | Meaning |
|---|---|
INVALID_CREDENTIALS | Email or password is incorrect |
ACCOUNT_BLOCKED | Account has been suspended |
INVALID_TOKEN | JWT or reset token is invalid or expired |
VALIDATION_ERROR | Request data failed validation |
INVITATION_NOT_FOUND | Invitation token does not exist |
INTERNAL_SERVER_ERROR | Unexpected server error |