# Common HTTP Error Codes


Code  | Description
------|------
`400` | Request parameters cannot be parsed (for example, when expecting JSON and given body is not valid JSON format)
`401` | `X-Client-Authorization` is invalid (or doesn't match provided loyalty club or product)
`402` | Feature is not enabled or not configured properly for the Loyalty Club
`403` | Not authorized to perform this action (provided `X-Client-Authorization` doesn't have required permit)
`404` | The requested resource doesn't exist
`405` | Action cannot be performed for given resource (e.g. given record is not destroyable)
`409` | Record is not unique (this can be caused by a race condition, so it's possible that a retry will be successful)
`422` | Invalid parameters are provided (e.g. incorrect properties on member creation)
`444` | Security rejection. This request was rejected by our WAF system to prevent any possible attacks.
`460` | OAuth token required for the action is invalid (applies only to OAuth-related actions - see [OAuth flow](doc-341646))
`470` | Some of required header is missing
`471` | Some of headers is incorrect
`503` | Server is down for maintenance

Also, most of handled errors have JSON response body like this:

```json
{"error": "Message describing what went wrong"}
```