Authentication error codes
Every public API error code emitted by Authentication, with its HTTP status, its type and a page per code.
Error codes emitted by Authentication. Each code links to its own page with the cause and the action to take.
| Code | Type | HTTP | Description |
|---|---|---|---|
api_key_expired | authentication_error | 401 | The key passed its expiry date. |
api_key_revoked | authentication_error | 401 | The key was revoked, and a revoked key never authenticates again — revocation is the way to cut off a leaked credential. |
invalid_api_key | authentication_error | 401 | The key does not match any active key. It may be mistyped, truncated, or belong to a different environment — test keys and live keys are not interchangeable. |
ip_not_allowed | authentication_error | 401 | The key restricts the addresses it accepts, and the request came from one outside that list. |
missing_api_key | authentication_error | 401 | The request carries no credentials: neither the Authorization header nor X-API-Key. |
origin_not_allowed | authentication_error | 401 | The request comes from a browser origin that the key does not accept. |
too_many_auth_failures | authentication_error | 429 | Too many failed authentication attempts arrived from the same address, so it is temporarily locked out to stop credential guessing. |
Related
Error codes by category
Find an error by the category that emits it.
Full reference table
All codes, HTTP statuses, types and descriptions in one reference.
Error model
Interpret the error envelope and handle errors by code.