API reference
Errors & limits
Common statuses
| Status | Code | Meaning |
|---|---|---|
| 401 | unauthorized | Key is missing, malformed, expired, revoked, or invalid |
| 403 | insufficient_scope | Key lacks the exact operation scope |
| 403 | invalid_client | Agency key cannot access the requested client |
| 403 | managed_api_key_required | A legacy credential attempted a managed write |
| 404 | resource_not_found | The requested resource is outside the workspace or absent |
| 405 | method_not_allowed | Method is not supported |
| 413 | request_too_large | Request exceeds the configured body limit |
| 422 | invalid_payload | Request fields failed validation |
| 503 | public_api_not_configured | The public data boundary is unavailable |
Scope failures include a WWW-Authenticate header naming the exact required scope.
List endpoints accept limit from 1–100. Search text is limited to 120 characters. Request bodies use the backend's configured maximum (10 MiB in production), though the public API does not expose media-upload operations.