API errors
A request that cannot be completed returns an HTTP status of 400 or higher and a JSON body. Branch on the status code first, then on the error or code value when the response carries one, and treat any value you do not recognise as a failure of that status class.
Every error body carries a request id. Log it with the failed call and quote it when you contact support.
- Error body
- Identity verification API: errors
- Risk scoring and agent trust API: errors
- Protected actions API: errors
- Device intelligence API: errors
- Mobile and device identity API: errors
- Telemetry ingestion API: errors
- Observability query API: errors
- MCP server: errors
- Pulse tenant API: errors
- Health and public key endpoints: errors
Identity verification API
Status and error code pairs named in the responses.
400
- Invalid sessionId
- consent_required
- email_verification_unavailable
- idempotency_key_invalid
- invalid_case_id
- invalid_email
- invalid_hosted_options
- invalid_id_type
- invalid_or_expired
- invalid_request
- payload_invalid
- return_url_not_allowed
401
- invalid_api_key
- invalid_session
402
- spend_cap_reached
403
- API key does not have write:identity scope
- age_gender_estimation_not_enabled
- invalid_request
- kyc_legal_basis_receipt_required
- origin_not_allowed
404
- V1 endpoint not found
- invalid_request
- not_found
409
- already_verified
- email_verification_not_enabled
- email_verification_required
- example-code
- idempotency_conflict
- invalid_request
- session_expiring
- session_not_cancellable
- session_not_editable
- session_not_submittable
- verification_id_unavailable
- verify_gate_consumed
410
- kyc_session_cancelled
- kyc_session_expired
- session_cancelled
- session_expired
413
- body_too_large
415
- invalid_request
429
- Rate limit exceeded
- cooldown
- invalid_request
- rate_limited
- send_limit_reached
- session_rate_limited
500
- server_misconfigured
502
- email_send_failed
503
- email_unavailable
- hosted_verify_not_configured
- invalid_request
- kyc_legal_basis_receipt_unavailable
- nonce_mint_unavailable
- session_backend_unavailable
- submit_internal_error
- temporarily_unavailable
- write_failed
Risk scoring and agent trust API
Status and error code pairs named in the responses.
400
- Invalid body
- invalid_request
401
- invalid_api_key
402
- invalid_request
403
- API key does not have read:device scope
- feature disabled
404
- Not found
- V1 endpoint not found
413
- body_too_large
- invalid_request
415
- invalid_request
429
- Rate limit exceeded
500
- Internal server error
- invalid_request
503
- invalid_request
Protected actions API
Status and error code pairs named in the responses.
400
- invalid_action
- invalid_body
- invalid_expected_domain
- invalid_request_id
401
- invalid_api_key
403
- API key does not have read:device scope
404
- request_not_found
409
- already_consumed
413
- payload_too_large
422
- action_mismatch
- domain_mismatch
429
- Rate limit exceeded
500
- Internal server error
Device intelligence API
Status and error code pairs named in the responses.
400
- invalid_request
401
- invalid_api_key
403
- API key does not have read:device scope
- invalid_request
404
- Device not found
- invalid_request
- sealed-results key version unavailable
- sealed_key_version_unavailable
413
- body_too_large
415
- invalid_request
429
- Rate limit exceeded
500
- Internal server error
- invalid_request
- server_misconfigured
502
- invalid_request
Mobile and device identity API
Status and error code pairs named in the responses.
400
- device_delegation_invalid_subject_id
- invalid_request
- offline_capture_nonce_invalid
- offline_capture_verdict_claim_rejected
401
- invalid_api_key
403
- API key does not have read:device scope
- API key does not have write:identity:trusted-subject scope
- invalid_request
- kyc_legal_basis_receipt_required
404
- V1 endpoint not found
- invalid_request
409
- invalid_request
- offline_capture_idempotency_conflict
- offline_capture_nonce_replayed
410
- invalid_request
- offline_capture_bundle_expired
413
- body_too_large
- invalid_request
415
- invalid_request
429
- Rate limit exceeded
500
- Internal server error
503
- device_delegation_storage_unavailable
- invalid_request
- kyc_first_party_provenance_unavailable
- offline_capture_storage_unavailable
- registry_write_failed
Telemetry ingestion API
Status and error code pairs named in the responses.
400
- apm_invalid_payload
- apm_malformed_json
- apm_malformed_logs_payload
- apm_malformed_metrics_payload
- apm_malformed_otlp_json
- apm_malformed_profile_json
401
- apm_auth_expired
403
- apm_environment_mismatch
413
- apm_body_too_large
415
- apm_unsupported_media_type
429
- apm_rate_limited
503
- apm_authority_unavailable
- apm_profile_storage_unavailable
Observability query API
Status and error code pairs named in the responses.
400
- invalid_request
- schema_invalid
401
- Unauthorized
- coding_agent_auth_invalid
- coding_agent_auth_missing
403
- API key does not have read:apm scope
- coding_agent_scope_denied
404
- coding_agent_error_group_not_found
- resource_not_found
409
- capture_unavailable
429
- Rate limit exceeded
- coding_agent_rate_limited
500
- internal_error
502
- coding_agent_query_failed
503
- coding_agent_authority_unavailable
- coding_agent_bq_unavailable
MCP server
Status and error code pairs named in the responses.
401
- unauthorized
404
- not_found
429
- rate_limited
500
- internal_error
Pulse tenant API
Status and error code pairs named in the responses.
400
- invalid_cursor
- invalid_parameter
- invalid_request
- invalid_subject
401
- invalid_api_key
- missing_api_key
403
- insufficient_scope
- scope_not_granted
- tenant_not_armed
404
- application_not_found
- decision_not_found
- subject_not_found
409
- ambiguous_subject
- external_user_already_linked
- hint_not_active
429
- rate_limited
- too_many_outstanding_codes
503
- rate_limiter_unavailable
- tenant_auth_unavailable
Health and public key endpoints
Status and error code pairs named in the responses.
404
- Not found
429
- Rate limit exceeded
Error body
Noxtica KYC / KYB / KYM API
| Field | Type | Always returned | Description |
|---|---|---|---|
error | string | Yes | |
requestId | string | Yes |
Noxtica Pulse customer, sign-in and device API
| Field | Type | Always returned | Description |
|---|---|---|---|
code | string | Yes | Stable machine-readable identifier. |
error | string | Yes | |
message | string | No | |
requestId | string | No |
Noxtica Server API (/v1)
| Field | Type | Always returned | Description |
|---|---|---|---|
error | string | Yes | Machine-readable error string; route-specific values are listed on each operation. |
requestId | string | Yes | Correlation id for this call; quote it when you contact support. |
Identity verification API: errors
Codes named in the responses of the Identity verification API operations.
Risk scoring and agent trust API: errors
Codes named in the responses of the Risk scoring and agent trust API operations.
Protected actions API: errors
Codes named in the responses of the Protected actions API operations.
| Status | Code | Returned by |
|---|---|---|
400 | invalid_action | postProtectedActionsVerify |
400 | invalid_body | postProtectedActionsVerify |
400 | invalid_expected_domain | postProtectedActionsVerify |
400 | invalid_request_id | postProtectedActionsVerify |
401 | invalid_api_key | postProtectedActionsVerify |
403 | API key does not have read:device scope | postProtectedActionsVerify |
404 | request_not_found | postProtectedActionsVerify |
409 | already_consumed | postProtectedActionsVerify |
413 | payload_too_large | postProtectedActionsVerify |
422 | action_mismatch | postProtectedActionsVerify |
422 | domain_mismatch | postProtectedActionsVerify |
429 | Rate limit exceeded | postProtectedActionsVerify |
500 | Internal server error | postProtectedActionsVerify |
Device intelligence API: errors
Codes named in the responses of the Device intelligence API operations.
Mobile and device identity API: errors
Codes named in the responses of the Mobile and device identity API operations.
Telemetry ingestion API: errors
Codes named in the responses of the Telemetry ingestion API operations.
| Status | Code | Returned by |
|---|---|---|
400 | apm_invalid_payload | v1ApmIngestDeploymentMarker |
400 | apm_malformed_json | v1ApmIngestDeploymentMarker |
400 | apm_malformed_logs_payload | v1ApmIngestLogs |
400 | apm_malformed_metrics_payload | v1ApmIngestMetrics |
400 | apm_malformed_otlp_json | v1ApmIngestTraces |
400 | apm_malformed_profile_json | v1ApmIngestProfiles |
401 | apm_auth_expired | v1ApmIngestDeploymentMarker |
403 | apm_environment_mismatch | v1ApmIngestDeploymentMarker |
413 | apm_body_too_large | v1ApmIngestDeploymentMarker |
415 | apm_unsupported_media_type | v1ApmIngestDeploymentMarker |
429 | apm_rate_limited | v1ApmIngestDeploymentMarker |
503 | apm_authority_unavailable | v1ApmIngestDeploymentMarker |
503 | apm_profile_storage_unavailable | v1ApmIngestProfiles |
Observability query API: errors
Codes named in the responses of the Observability query API operations.
MCP server: errors
Codes named in the responses of the MCP server operations.
| Status | Code | Returned by |
|---|---|---|
401 | unauthorized | mcpJsonRpc |
404 | not_found | mcpJsonRpc |
429 | rate_limited | mcpJsonRpc |
500 | internal_error | mcpJsonRpc |
Pulse tenant API: errors
Codes named in the responses of the Pulse tenant API operations.
Health and public key endpoints: errors
Codes named in the responses of the Health and public key endpoints operations.
| Status | Code | Returned by |
|---|---|---|
404 | Not found | getCollectorJwks, getAgentPassportJwks |
429 | Rate limit exceeded | getHealth |
This page is generated from the Noxtica OpenAPI specification release v0.4.0: kyc.yaml version 1.2.0-2026-10-27 (SHA-256 c91a695cfde0), mcp.yaml version 0.1.0-2026-10-27 (SHA-256 1a4875efa736), pulse.yaml version 0.9.0-2026-10-27 (SHA-256 95196a58bb5b), v1.yaml version 1.3.0-2026-10-27 (SHA-256 3fd15257a022). Do not edit it by hand.