Problem codes
Every code the API returns in an RFC 9457 problem response, with the status that carries it
Every error response carries one of 131 stable codes. The type of a
problem points at that code's page, so a response explains itself. Branch on code,
never on the human-readable detail.
The envelope itself is described in errors.
400 Bad Request
| Code | Meaning |
|---|---|
api_key_capability_human_only | API keys cannot carry key-management capabilities |
api_key_expiry_invalid | API key expiry must be in the future |
api_key_name_invalid | API key name must be between 1 and 80 characters |
api_key_origin_invalid | allowed origins must be scheme://host[:port] with no path or wildcard |
assignment_invalid | memberId and roleKey are required |
capabilities_invalid | role capabilities must be known named capabilities |
category_invalid | the event category is not in the active catalog |
checkin_invalid | check the check-in session details |
domain_invalid | check the domain details |
email_domain_invalid | enter a valid email domain |
email_domain_not_verified | email domain ownership is not yet proven |
event_invalid | check the event details |
event_not_publishable | the event is missing required details or a valid pass |
hostname_invalid | enter a valid hostname; Ulsav subdomains and internal hosts are not allowed |
idempotency_key_required | Idempotency-Key is required for a replay |
identity_invalid | enter a valid email address or E.164 phone number |
identity_provider_invalid | check the identity provider configuration |
invalid_action | the bulk action is not supported |
invalid_cursor | the cursor is invalid |
invalid_membership | the collection membership is invalid |
invalid_request | the request could not be encoded |
invalid_series_order | series ordering must list exactly its member events |
invite_invalid | invitation token is required |
location_invalid | the location query is invalid |
organization_invalid | check the Organization profile values |
pass_sale_window_invalid | the Pass sale window must fall before the end of the Event |
registration_config_invalid | check the registration configuration |
request_invalid | The request body, query, or path failed validation. |
requirement_invalid | check the requirement configuration |
reschedule_sessions_required | include every EventSession in the reschedule plan |
scope_invalid | scopeType must be a canonical Scope |
search_invalid | the search criteria are invalid |
sso_redirect_invalid | this host is not a registered SSO callback |
sso_response_missing | the SAML response is missing |
topic_invalid | one or more topics are invalid |
unsupported_grant_type | the grant type is not supported |
upload_invalid | the upload metadata is invalid or expired |
venue_invalid | the venue query is invalid |
webhook_event_type_invalid | select valid webhook event types |
webhook_filter_invalid | check the webhook filters |
webhook_invalid | check the webhook configuration |
webhook_url_invalid | enter a public https endpoint |
401 Unauthorized
| Code | Meaning |
|---|---|
api_key_expired | this API key has expired |
api_key_invalid | this API key is invalid |
api_key_revoked | this API key has been revoked |
authentication_required | authentication required |
oauth_invalid | the OAuth authorization is invalid or expired |
otp_invalid | the code is invalid or expired |
session_invalid | session is invalid or expired |
403 Forbidden
| Code | Meaning |
|---|---|
api_key_authority_exceeds | cannot grant capabilities beyond your own authority |
api_key_forbidden | this API key lacks the required capability |
api_key_management_forbidden | API-key credentials cannot manage API keys |
api_key_scope_denied | this API key is not scoped to the requested resource |
capability_denied | this action requires an additional capability |
event_suspended | this event is suspended by Ulsav policy |
forbidden | you do not have access to this organization |
insufficient_scope | the token lacks the profile scope |
organization_suspended | this Organization is suspended |
platform_suspended | API keys are temporarily suspended |
role_escalation | cannot grant capabilities beyond your own authority |
role_protected | the owner role is protected |
404 Not Found
| Code | Meaning |
|---|---|
api_key_not_found | API key not found |
check_in_session_not_found | check-in session not found |
domain_not_found | domain not found |
eligibility_not_found | organization eligibility not found |
email_domain_not_found | email domain not found |
event_group_not_found | event group not found |
event_group_series_not_found | event group series not found |
event_not_found | event not found |
event_series_not_found | event series not found |
host_not_found | host does not resolve to a target |
identity_provider_not_found | identity provider not found |
invite_not_found | invitation not found |
location_not_found | no city found near that location |
member_not_found | member not found |
not_found | the bulk operation was not found |
oauth_provider_not_found | OAuth provider not configured |
organization_not_found | Organization not found |
pass_not_found | pass not found |
registration_config_not_found | registration configuration not found |
requirement_not_found | requirement not found |
role_not_found | role not found |
session_not_found | session not found |
sso_provider_not_found | no SSO provider is configured for this host |
target_not_found | the target does not exist in this organization |
webhook_delivery_not_found | webhook delivery not found |
webhook_not_found | webhook endpoint not found |
409 Conflict
| Code | Meaning |
|---|---|
canonical_domain_exists | this target already has a canonical domain |
category_locked | the event category cannot change after publication |
domain_disabled | this domain is disabled |
draft_only | this operation is only available while the event is a draft |
email_domain_taken | this email domain is already claimed by an organization |
event_not_ended | the event has not ended yet |
event_not_saleable | event sales are not open |
hostname_taken | this hostname is already connected |
idempotency_conflict | this Idempotency-Key was already used with different details |
idempotency_key_conflict | this idempotency key belongs to another delivery |
identity_conflict | this Identity belongs to another Account |
identity_provider_exists | this organization already has an identity provider |
identity_resolution_required | this Identity already belongs to another Account; resolution: |
invite_exists | a pending invite already exists for this contact |
last_identity | an Account must retain at least one Identity |
last_owner_required | the organization must keep at least one owner |
lifecycle_transition_invalid | this lifecycle transition is not allowed from the current state |
material_change_required | this change requires the material-change workflow |
organization_not_eligible_for_paid_publishing | the Organization must complete KYC and settlement verification before selling paid passes |
registration_policy_conflict | some accounts already hold more than one place in this event |
reschedule_conflict | the reschedule plan conflicts with the new Event dates |
role_exists | a role with this key already exists |
role_in_use | this role still has active assignments |
session_referenced | the session is still selected by a pass |
slug_taken | this Organization slug is already taken |
subdomain_taken | this event group subdomain is already taken |
webhook_endpoint_disabled | enable this endpoint before replaying a delivery |
webhook_limit_reached | this organization has reached its webhook endpoint limit |
410 Gone
| Code | Meaning |
|---|---|
invite_expired | this invitation has expired |
422 Unprocessable Entity
| Code | Meaning |
|---|---|
bulk_request_invalid | the bulk request is not valid |
429 Too Many Requests
| Code | Meaning |
|---|---|
otp_rate_limited | wait before requesting another code |
rate_limited | too many requests; try again later |
webhook_test_rate_limited | at most 5 test deliveries are allowed per minute |
500 Internal Server Error
| Code | Meaning |
|---|---|
account_load_failed | load account |
categories_unavailable | categories are unavailable |
discovery_unavailable | discovery is unavailable |
internal_error | The server could not complete the request. |
request_context_unavailable | request context unavailable |
requirements_unavailable | requirement scopes are not configured |
sso_secret_unavailable | SSO secret encryption is not configured |
topics_unavailable | topics are unavailable |
502 Bad Gateway
| Code | Meaning |
|---|---|
sso_unavailable | the identity provider could not complete authentication |
503 Service Unavailable
| Code | Meaning |
|---|---|
geocoder_unavailable | city lookup is unavailable |
webhook_secret_unavailable | webhook secret encryption is not configured |