Contract authority: OpenAPI is the machine-readable public v1 contract. This page is generated from the Privilege Integrator Pack. If prose and OpenAPI disagree, stop and contact Privilege.

11. Errors

Public envelope:

{
  "error": {
    "code": "UNAUTHENTICATED",
    "message": "Invalid credentials",
    "requestId": "irq_0123456789abcdef0123456789abcdef"
  }
}

X-Request-Id is also echoed on responses. Retain requestId when contacting Privilege support.

Useful public codes

Group	Code	Typical HTTP
Authentication	UNAUTHENTICATED	401
Client state	CLIENT_DISABLED	403
TLS gate	UNAVAILABLE	403
Scope	INSUFFICIENT_SCOPE	403
Outlet mapping	OUTLET_UNMAPPED	404
Outlet mapping	OUTLET_DISABLED, OUTLET_UNAUTHORIZED	403
Token / eligibility	TOKEN_INVALID	400
Token / eligibility	TOKEN_EXPIRED, RESERVATION_EXPIRED	410
Token / eligibility	MEMBERSHIP_INELIGIBLE, DEAL_NOT_REDEEMABLE, OFFER_UNSUPPORTED, RESERVATION_FORBIDDEN	403 / 400
State / receipt	INVALID_STATE, RECEIPT_CONFLICT, CONFLICT	409
Idempotency	IDEMPOTENCY_KEY_REQUIRED	400
Idempotency	IDEMPOTENCY_CONFLICT, IDEMPOTENCY_IN_PROGRESS	409
Validation	VALIDATION_ERROR	400
Rate limit	RATE_LIMITED	429
Server	INTERNAL_ERROR	500

Privilege does not return stack traces or SQL in this envelope.

---