Resources

Error codes

All 119 codes the gateway emits, from GET https://os.one.ml/api/v1/errors. Each gateway error's docs_url points at its entry. How to handle them: Errors.

Code	Status	Type	Meaning
`BAD_GATEWAY`	502	`bad_gateway`	The service upstream returned an invalid or unexpected response.
`BAD_REQUEST`	400	`bad_request`	The request is malformed: path, header, query or body failed validation.
`BEARER_REQUIRED`	401	`unauthorized`	Send exactly one Authorization: Bearer header with a One account API key, M2M token or session.
`CREDENTIAL_INVALID`	401	`unauthorized`	The credential is invalid, expired or revoked.
`UNAUTHORIZED`	401	`unauthorized`	The credential is not accepted for this operation.
`FORBIDDEN`	403	`forbidden`	The credential is valid but this principal may not perform the operation.
`SCOPE_MISSING`	403	`forbidden`	The credential lacks the scope named in required_scope.
`ROUTE_NOT_FOUND`	404	`not_found`	No Genesis service or operation exists at this path.
`NOT_FOUND`	404	`not_found`	The operation is not admitted at this path.
`METHOD_NOT_ALLOWED`	405	`method_not_allowed`	The path exists but does not accept this method.
`PAYLOAD_TOO_LARGE`	413	`payload_too_large`	The request body exceeds the limit for this operation.
`RATE_LIMITED`	429	`rate_limited`	Too many requests for this principal; retry after Retry-After seconds.
`SERVICE_DISABLED`	503	`service_unavailable`	The service is registered but not enabled on this gateway; retry after Retry-After seconds.
`SERVICE_UNAVAILABLE`	503	`service_unavailable`	The service or operation is temporarily unavailable.
`AUTH_UNAVAILABLE`	503	`service_unavailable`	One account credential verification is temporarily unavailable.
`UPSTREAM_UNREACHABLE`	502	`bad_gateway`	The service upstream could not be reached.
`UPSTREAM_TIMEOUT`	504	`gateway_timeout`	The service upstream did not answer within the request deadline. A read is safe to retry; a mutation's outcome is unknown, so inspect its operation receipt before retrying.
`UPSTREAM_DENIED`	403	`forbidden`	The service upstream refused the request.
`INTERNAL_ERROR`	500	`internal_error`	Unexpected gateway error.
`INVALID_UPSTREAM_OVERRIDE`	500	`internal_error`	The gateway is misconfigured for this service.
`CATALOG_UNAVAILABLE`	502	`bad_gateway`	The public Foundry model catalog is unavailable.
`ORG_READ_UNAVAILABLE`	503	`service_unavailable`	The organization read is temporarily unavailable.
`RIGS_READ_UNAVAILABLE`	503	`service_unavailable`	The Rigs inventory read is temporarily unavailable.
`BLINDS_IDENTITY_UNAVAILABLE`	503	`service_unavailable`	Blinds private identity is temporarily unavailable.
`BLINDS_REQUEST_REJECTED`	400	`bad_request`	Blinds refused the request shape.
`FLARES_V2_DENIED`	403	`forbidden`	Flares refused the request.
`FLARES_V2_UNAVAILABLE`	503	`service_unavailable`	Flares signing is temporarily unavailable.
`FOUNDRY_BILLING_UNAVAILABLE`	503	`service_unavailable`	Foundry billing is temporarily unavailable; outcome may be unknown.
`AGENT_CREATE_UNAVAILABLE`	503	`service_unavailable`	Minds agent creation is temporarily unavailable; outcome may be unknown.
`AGENT_MEMORY_UNAVAILABLE`	503	`service_unavailable`	Minds agent memory is temporarily unavailable; outcome may be unknown.
`MINDS_UNAVAILABLE`	503	`service_unavailable`	Native Minds is temporarily unavailable; outcome may be unknown.
`USAGE_UNAVAILABLE`	503	`service_unavailable`	Usage reads are temporarily unavailable.
`BILLING_UNAVAILABLE`	503	`service_unavailable`	Billing accounts are temporarily unavailable; the outcome of a write may be unknown, so retry with the same Idempotency-Key.
`MCP_UNAVAILABLE`	503	`service_unavailable`	The hosted MCP endpoint is temporarily unavailable.
`DPOP_NONCE_REQUIRED`	401	`unauthorized`	Retry once with the DPoP nonce in the dpop-nonce header.
`DPOP_REQUIRED`	401	`unauthorized`	This operation requires a DPoP proof.
`INVALID_DPOP`	401	`unauthorized`	The DPoP proof is missing, malformed or does not match the request.
`ORIGINAL_CONSOLE_REQUIRED`	401	`unauthorized`	This operation requires the original Console session, not a derived credential.
`UNAUTHENTICATED`	401	`unauthorized`	The request is not authenticated.
`INVALID_AGENT_CREDENTIAL`	401	`unauthorized`	The agent credential is invalid.
`INVALID_AGENT_TOKEN`	401	`unauthorized`	The agent token is invalid or expired.
`INVALID_AGENT_CAPABILITY`	403	`forbidden`	The agent capability is invalid for this operation.
`AGENT_CAPABILITY_EXPIRED`	401	`unauthorized`	The agent capability has expired.
`INVALID_CAPABILITY`	403	`forbidden`	The capability is invalid for this operation.
`AMBIENT_AUTHORITY_NOT_ALLOWED`	403	`forbidden`	Ambient (cookie or forwarded) authority is not accepted; send an explicit credential.
`SELECTION_EXPIRED`	401	`unauthorized`	The signed-in organization/project selection expired; select it again.
`HUMAN_SANDBOX_SELECTION_REQUIRED`	403	`forbidden`	This operation requires a signed-in human with a Sandbox selection.
`OWNER_CONTEXT_REQUIRED`	403	`forbidden`	This operation requires the resource owner context.
`ORIGINAL_CONTEXT_MISMATCH`	403	`forbidden`	The request context does not match the original selection.
`SCOPE_MISMATCH`	403	`forbidden`	The credential scope does not match this operation.
`DENIED`	403	`forbidden`	The operation was denied.
`INACTIVE`	403	`forbidden`	The credential or resource is inactive.
`SANDBOX_CREATE_NOT_ADMITTED`	403	`forbidden`	Creating resources is not admitted in this Sandbox.
`CREATION_CONTEXT_OR_KEY_REQUIRED`	400	`bad_request`	Creation requires a selected context or an idempotency key.
`IDEMPOTENCY_KEY_REQUIRED`	400	`bad_request`	Send an Idempotency-Key header for this operation.
`INVALID_REQUEST`	400	`bad_request`	The request failed validation.
`INVALID_QUERY`	400	`bad_request`	The query parameters failed validation.
`INVALID_IDENTIFIER`	400	`bad_request`	An identifier in the path or body is invalid.
`INVALID_DELEGATION`	403	`forbidden`	The delegated credential is invalid for this operation.
`QUERY_NOT_ALLOWED`	400	`bad_request`	This operation takes no query parameters.
`BODY_NOT_ALLOWED`	400	`bad_request`	This operation takes no request body.
`BODY_TOO_LARGE`	413	`payload_too_large`	The request body exceeds the limit for this operation.
`JSON_REQUIRED`	415	`unsupported_media_type`	Send the body as application/json.
`BEACONS_SESSION_REQUIRED`	403	`forbidden`	Beacons requires a current human Console session in Sandbox.
`BEACONS_REQUEST_REFUSED`	403	`forbidden`	The Beacons service refused the request.
`INVALID_BEACONS_REQUEST`	400	`bad_request`	Beacons requests do not accept query strings or fragments.
`AMBIGUOUS_BEACONS_REQUEST`	400	`bad_request`	A Beacons request header is repeated or hop-by-hop.
`INVALID_BEACONS_OPERATION_ID`	400	`bad_request`	Idempotency-Key must be a UUIDv4 where required and is not accepted on reads.
`INVALID_BEACONS_BODY`	400	`bad_request`	Beacons bodies must be application/json and are not accepted on reads.
`BEACONS_IDENTITY_UNAVAILABLE`	503	`service_unavailable`	Beacons private identity is temporarily unavailable.
`BEACONS_RESOURCE_UNAVAILABLE`	503	`service_unavailable`	Beacons authorization is temporarily unavailable.
`INVALID_BEACONS_RESPONSE`	502	`bad_gateway`	The Beacons response was refused.
`BEACONS_UNAVAILABLE`	503	`service_unavailable`	Beacons is temporarily unavailable.
`EVENT_ID_MISMATCH`	409	`conflict`	The event id does not match the delivery.
`EVENT_TOO_LARGE`	413	`payload_too_large`	The event exceeds the size limit.
`MIND_NOT_READY`	409	`conflict`	The Mind is not ready for this operation.
`INVALID_RESPONSE`	502	`bad_gateway`	The upstream returned an invalid response.
`DELEGATION_UNAVAILABLE`	503	`service_unavailable`	Auth delegation is temporarily unavailable.
`WORKLOAD_IDENTITY_UNAVAILABLE`	503	`service_unavailable`	The gateway workload identity is temporarily unavailable.
`RATE_LIMIT_UNAVAILABLE`	503	`service_unavailable`	Rate limiting is temporarily unavailable.
`UNAVAILABLE`	503	`service_unavailable`	The operation is temporarily unavailable.
`FLOCKS_NATIVE_REFUSED`	403	`forbidden`	Flocks refused the native request.
`BEACONS_REDIRECT_REFUSED`	502	`bad_gateway`	Beacons returned a redirect, which is refused.
`BEACONS_REQUEST_TOO_LARGE`	413	`payload_too_large`	The Beacons request exceeds the size limit.
`BEACONS_RESPONSE_TOO_LARGE`	502	`bad_gateway`	The Beacons response exceeded the size limit.
`TRACES_RELAY_UNAVAILABLE`	503	`service_unavailable`	The Traces relay refused or could not complete the request; see reason and layer.
`TRACES_UPSTREAM_REFUSED`	403	`forbidden`	traces-api refused the request; layer is traces-api and request_id is its own.
`ENVIRONMENT_NOT_AVAILABLE`	409	`conflict`	This operation has no resources in the selected environment. Your access is unchanged; switch environment to use it.
`FOUNDRY_UPSTREAM_REFUSED`	403	`forbidden`	Foundry refused the request; layer is foundry.
`FOUNDRY_UNAVAILABLE`	503	`service_unavailable`	Foundry is temporarily unavailable; outcome may be unknown for paid calls.
`BOXES_RELAY_UNAVAILABLE`	503	`service_unavailable`	The Boxes relay refused or could not complete the request.
`TAPS_RELAY_UNAVAILABLE`	503	`service_unavailable`	The Taps relay refused or could not complete the request.
`GEARS_READ_RELAY_UNAVAILABLE`	503	`service_unavailable`	The Gears read relay refused or could not complete the request.
`ZAPS_NATIVE_RELAY_UNAVAILABLE`	503	`service_unavailable`	The Zaps relay refused or could not complete the request.
`MINDS_CONTROLLER_RELAY_UNAVAILABLE`	503	`service_unavailable`	The Minds controller relay refused or could not complete the request.
`RUNNER_UNAVAILABLE`	503	`service_unavailable`	Runner is unavailable in this mode.
`FLOCKS_SIGNING_KEY_MISSING`	503	`service_unavailable`	Flocks is routed without its own verification key configured; nothing was forwarded.
`OPERATION_NOT_AVAILABLE`	404	`not_found`	This service does not expose the operation through the gateway.
`UNSUPPORTED_BEACONS_OPERATION`	404	`not_found`	Beacons does not expose this operation (returned only after authentication).
`INVALID_ORG_READ`	400	`invalid_request`	An org usage or billing read carried a body, a fragment, a non-canonical path or a query other than days=7 or days=30 (billing takes no query).
`NO_AUTHORIZATION_ON_VERIFY`	400	`invalid_request`	Credential verification carries the credential in its JSON body only; send no Authorization header.
`QUERY_TOO_LONG`	400	`invalid_request`	The query string exceeds 8192 characters.
`PATH_INVALID`	400	`invalid_request`	The gateway path contains forbidden characters or encodings, or exceeds 8192 characters.
`AMBIGUOUS_IDEMPOTENCY_KEY`	400	`invalid_request`	A queue message publish carried more than one Idempotency-Key header.
`DPOP_INVALID`	401	`unauthorized`	The DPoP header is not a compact JWS.
`INVALID_ARGUMENT`	400	`invalid_request`	The JSON body is malformed or is not exactly the published shape for this route.
`GENESIS_GATEWAY_NOT_CONFIGURED`	503	`api_error`	This Console deployment has no Genesis gateway configured.
`GENESIS_GATEWAY_IDENTITY_UNAVAILABLE`	503	`api_error`	The Console could not obtain its workload identity for the gateway. Retry shortly.
`GENESIS_GATEWAY_TARGET_INVALID`	502	`api_error`	The configured gateway preview target is not a verified one.
`GENESIS_GATEWAY_PATH_INVALID`	502	`api_error`	The resolved gateway URL left the gateway origin or failed path validation.
`GENESIS_GATEWAY_PUBLIC_ROUTE_INVALID`	502	`api_error`	Only POST /v1/iam/credentials/verify may be called without a customer credential this way.
`GENESIS_GATEWAY_ANONYMOUS_INVALID`	502	`api_error`	An anonymous gateway call carried a bearer.
`GENESIS_GATEWAY_CUSTOMER_REQUIRED`	502	`api_error`	The gateway call needed a usable customer bearer.
`GATEWAY_TIMEOUT`	504	`api_error`	The gateway did not answer within the route budget.
`GATEWAY_ERROR`	502	`api_error`	The gateway could not be reached.
`AUTH_SERVER_UNREACHABLE`	502	`api_error`	The One sign-in service could not be reached while relaying its OAuth authorization-server metadata.
`AUTH_SERVER_TIMEOUT`	504	`api_error`	The One sign-in service did not answer within 10 seconds while relaying its OAuth authorization-server metadata.
`UNEXPECTED_REDIRECT`	502	`api_error`	The gateway answered with a redirect, which the Console never follows.
`UPSTREAM_ERROR_TOO_LARGE`	502	`api_error`	The gateway error body exceeded 64 KiB and was dropped.

One Superintelligence, Inc. · Built from Genesis 0.1.12 and the live gateway on 2026-10-20. Support