Skip to main content

Errors & Rate Limits

Stripe-style errors, authorization denials, and Kong rate limits.

Syntra returns structured error objects. Authorization failures use a consistent authorization_error type with insufficient_permissions or feature_not_enabled codes.

Error format

JSON
{
  "error": {
    "type": "authorization_error",
    "code": "insufficient_permissions",
    "message": "Missing required permission: engage:campaigns:send"
  }
}

Common status codes

  • 401: Missing or invalid API key
  • 403: Permission or feature not enabled
  • 429: Kong or tenant rate limit exceeded
  • 503: Auth introspection unavailable

Kong rate limits (per minute)

  • Global default: 1,000
  • Identity: 300 · Verify: 120 · Route: 500 · AI: 200