Reference
Errors & Rate Limits
HTTP codes, retry guidance, and platform limits.
- 200 — Success (
ok: true) or soft session invalid (sessionInvalidon bootstrap) - 400 — Malformed body or validation failed
- 401 — Not authenticated
- 403 — Paid gate, attempt token mismatch, age lock, or insufficient credits
- 404 — Resource not found
- 429 — Rate limited (
retryAfterseconds may be included) - 500 — Server error; retry with exponential backoff
Public endpoints use short CDN cache headers. Session, quiz, and payment routes always send Cache-Control: private, no-store.
On 429, honor `Retry-After` or `retryAfter` in the JSON body before repeating the same write operation.