Authentication error codes
Every public API error code emitted by Authentication, with its HTTP status, its type and a page per code.
Error codes emitted by Authentication. Each code links to its own page with the cause and the action to take.
| Code | Type | HTTP | Description |
|---|---|---|---|
api_key_expired | authentication_error | 401 | The key passed its expiry date. |
api_key_revoked | authentication_error | 401 | The key was revoked, and a revoked key never authenticates again — revocation is the way to cut off a leaked credential. |
invalid_api_key | authentication_error | 401 | The key does not match any active key. It may be mistyped, truncated, or belong to a different environment — test keys and live keys are not interchangeable. |
ip_not_allowed | authentication_error | 401 | The key restricts the addresses it accepts, and the request came from one outside that list. |
missing_api_key | authentication_error | 401 | The request carries no credentials: neither the Authorization header nor X-API-Key. |
origin_not_allowed | authentication_error | 401 | The request comes from a browser origin that the key does not accept. |
too_many_auth_failures | authentication_error | 429 | Too many failed authentication attempts arrived from the same address, so it is temporarily locked out to stop credential guessing. |