Errors

Error responses use a JSON body with an error code string you can branch on in clients.

{
  "error": "forbidden"
}

Authentication and authorization

Status	`error`	What to check
401	`unauthorized`	Header present? Using `x-api-key`?
401	`invalidApiKey`	Key copied correctly? Not revoked or expired?
403	`forbidden`	Key permissions and organization match the request?
403	`featureNotAvailable`	Plan includes this feature (for example Rocket League tags or API access)?
429	`rateLimited`	Too many requests with this key — wait and retry

Status	Common `error` values
400	`invalidRequest`, `invalidStatus`, `alreadyConverted`, `playerCreateFailed`, `convertFailed`, `invalidPlayer`, `invalidTeam`, `invalidTeamRole`, `invalidFileType`, `fileTooLarge`, `unsupportedContentType`, `duplicateGame`, `invalidDiscordUserId`
404	`teamNotFound`, `playerNotFound`, `documentNotFound`, `notFound`
409	`discordUserIdTaken`, `alreadyApplied`
413	`payloadTooLarge`
500	`internalServerError`, `uploadUrlFailed`, `downloadUrlFailed`

Exact codes depend on the endpoint. See the API reference for operation-specific responses.

Confirm the base URL is https://api.squadvault.xyz/v1.
Confirm the organization ID in the path, query, or body matches the key’s organization. Tryout get/update/convert always require organizationId (?organizationId= on GET, JSON body on PATCH/POST).
Confirm the key has the permission listed in Permissions.
For uploads, confirm contentType is allowed and fileKey starts with documents/{organizationId}/.