HeyTacoAPI

Errors

Error codes returned by the HeyTaco API.

Error responses

When something goes wrong, we'll send you an error response in the following format:

code

Stable and code-safe; use this for conditional logic or error handling.

message

The helper message. You may use it for logging and debugging, but do not branch on its value — it may change over time.

Example response
{
  "error": {
    "code": "not_authenticated",
    "message": "Provide your API token as a Bearer token in the Authorization header."
  }
}

Our error code catalog

Below are all of our expected error responses, where they happen, and some guidance on how to handle them.

not_authenticated

401

Missing or malformed Authorization header.

Returned by (1)

invalid_token

401

Unknown, revoked, or expired token.

Returned by (1)

https_required

403

The request was made over plain HTTP. Use https://.

Returned by (1)

insufficient_scope

403

Token lacks a required scope.

Returned by (1)

leaderboard_type_not_enabled

403

The requested leaderboard type is not enabled for this workspace. Returned to leaderboard-scoped tokens; leaderboard:all tokens bypass this check.

Returned by (1)

api_disabled

403

The team has disabled API access.

Returned by (1)

invalid_request

400

Unknown parameter, missing required field, or cross-field rule violation.

Returned by (1)

invalid_type

400

type is not one of received | given | combined.

Returned by (1)

invalid_timeframe

400

timeframe is not in the allowed set or violates the combined-only rule.

Returned by (1)

invalid_channel

400

channel_id was empty or invalid.

Returned by (1)

invalid_timezone

400

timezone is not a recognized time zone.

Returned by (1)

invalid_date_range

400

start_date/end_date failed format or ordering rules.

Returned by (1)

date_range_too_large

400

Custom range exceeds the 2-year maximum.

Returned by (1)

invalid_limit

400

limit was not a positive integer.

Returned by (1)

rate_limited

429

Rate limit exceeded — see Retry-After and the RateLimit-* headers.

Returned by (1)

team_inactive

403

The workspace is deactivated in HeyTaco (e.g. the subscription has lapsed).

Returned by (1)

user_inactive

403

The user who owns the token has been deactivated. Their tokens are revoked in the same operation, but a token in a mid-flight request may still surface this code.

Returned by (1)

invalid_team

403

The workspace could not be found by the upstream service.

Returned by (1)

user_not_in_team

403

The token's owner is no longer a member of the workspace.

Returned by (1)

service_unavailable

503

A dependent service is unreachable or returned a 5xx. Retry with backoff.

Returned by (1)

internal_error

500

An unexpected server-side error. Not caused by the request.

Returned by (1)

On this page