Errors

Every error is the same JSON, with a status, a stable code and a message for people.

Response 404

{
  "error": {
    "code": "not_found",
    "message": "No account with that id in this workspace."
  }
}

Branch on code. message is for logs and may change.

Codes

Status	Code	Meaning
400	`invalid_parameter`	A query parameter is out of range or not one of its values. The message names it.
400	`invalid_body`	The body isn't a JSON object of at most 256 KB.
400	`invalid_url`	A webhook url isn't a public https address on the default port.
400	`refused`	Taseli couldn't do what was asked (for example, no competitor by that name). The message says why.
401	`unauthorized`	No key, or the key is expired, revoked or cut off.
403	`scope`	The key is read-only and the route writes.
403	`role`	Only an owner or admin manages webhooks.
403	`app_token`	Webhooks take a personal key, not a connected app's token.
403	`client_scope`	The key's owner is limited to one client. The API isn't open to them.
403	`workspace`	The key's workspace can't be opened anymore.
404	`not_found`	No such endpoint, or no such object in this workspace.
404	`not_enabled`	Competitor watching isn't on for this business.
405	`method_not_allowed`	The endpoint doesn't take that method. Allow lists the ones it does.
409	`limit`	The workspace already has 5 webhooks.
429	`rate_limited`	Over a limit. Wait Retry-After seconds.
500	`server_error`	Taseli failed. Safe to retry a read after a minute.
503	`unavailable`	The feature isn't available in this environment.

A parameter outside its values is an error, never ignored. Unknown parameters are ignored, so a new parameter can't break an old call.

Request	Retry?
Any `GET`	Yes. Reads change nothing.
`429`	After `Retry-After` seconds.
`500`	After a minute.
`4xx` other than `429`	No. It fails the same way until the request changes.
`POST /webhooks`	Not blindly. There's no idempotency key: after a timeout, list webhooks first, or you may make a second one.
`DELETE /webhooks/{id}`	Yes. A second try answers `404`, and the webhook is gone either way.
`POST /webhooks/{id}/test`	Yes. It sends another test.

Every response carries a Request-Id header. Log it. When you write to support, send it: Taseli can find any failed request by it.