Errors and limits

API failures use a stable JSON envelope:

{
  "code": "validation_error",
  "message": "One or more validation errors occurred.",
  "errors": {
    "name": ["The Name field is required."]
  }
}

Status	Meaning
400	Invalid request or unsupported value.
401	Missing, malformed, expired, or revoked key.
403	Key lacks the required scope, MFA is required, or the account is inactive.
402	The workspace plan does not currently allow this product capability.
404	The resource does not exist in the key's workspace.
429	Rate limit exceeded. Retry with exponential backoff and jitter.
500	Unexpected server failure. Report the correlation ID, not your key.

The global API limit is currently 300 requests per minute per authenticated identity. Integrations must handle 429 and must not retry validation or authorization failures without correcting the request.