Interpret authentication, authorization, validation, rate-limit and idempotency failures safely.

StatusMeaningAction400 / 422Malformed or invalid inputCorrect the request; do not retry unchanged.401Credentials missing or invalidVerify identifier, secret and Authorization encoding.403IP, scope or staff-role policy denied the actionGrant only the missing permission or correct the exact source IP.404Endpoint or requested record is unavailableVerify private endpoint key and record ownership.409State or idempotency conflictRead the response and reconcile state before retrying.429Rate limit reachedBack off with jitter and reduce request frequency.500 / 503Temporary server failureRetry a bounded number of times only when the operation is idempotent.

Record a safe diagnostic

Store timestamp, action, HTTP status, sanitized error code and request reference. Never log the Authorization header, API secret, activation key, payment details or complete customer payload.