Errors

Every error has the same shape, whatever the status code.

{"error":"invalid api key"}

Status codes

CodeMeaning
400Malformed request — bad JSON, or a field the endpoint requires is missing.
401Missing, unknown, or revoked API key.
404No such resource. Also returned for resources belonging to someone else — the API will not confirm an id exists.
409Conflict, e.g. signing up with an email already registered.
422The request was understood but the credential or presentation failed verification.
429Rate limit exceeded. See Rate limits.
500Something broke on our side.
502The oracle is unreachable. Retry.

404 instead of 403

Asking for a key you do not own returns 404, not 403. A 403 would confirm the id exists, which is a small information leak we would rather not hand out.