200 OK | Successful request, includes existing-resource hits for idempotent endpoints. |
201 Created | New resource created. |
202 Accepted | Request queued for asynchronous processing (AML events, KYC submissions). |
400 Bad Request | Request body or query parameters failed schema validation. |
401 Unauthorized | Missing or invalid bearer key. |
403 Forbidden | Authenticated, but the operation requires elevated (admin) privileges. |
404 Not Found | The referenced resource does not exist or is not visible to your tenant. |
409 Conflict | Idempotency conflict (e.g. a pending change already exists). |
422 Unprocessable Entity | Request is syntactically valid but semantically rejected (rare; most validation surfaces as 400). |
429 Too Many Requests | Per-key rate limit exceeded. |
500 Internal Server Error | An unexpected server error. The request_id lets us trace it. |