Error codes
Errors are stable codes, not free text — branch on the code.
Shape
{ "error": { "type": "invalid_request_error", "code": "parameter_missing", "param": "asset_id", "message": "asset_id is required." } }
Common statuses
400— invalid request (missing or malformed parameters).401— missing or invalid API key.404— resource not found, or not visible to your tenant.409— idempotency or state conflict.429— rate limited; back off and retry.503— a dependency (e.g. compliance screening) is unavailable and the action failed closed.
A
503 from a fail-closed control is a safety feature: when screening cannot run, the transfer does not proceed rather than slipping through unchecked.