ReferenceError Codes

Error Codes

All SilentAuth API errors return a JSON body with a code and message field. Use the code for programmatic handling and the message for debugging.

Error Response Shape

{
  "error": {
    "code":    "intent_expired",
    "message": "Intent int_xK9mNpQ2 expired at 2024-01-15T11:30:00Z",
    "request_id": "req_abc123"
  }
}
CodeStatusDescription
intent_not_found404The specified intent ID does not exist in your project.
intent_expired410The intent has passed its expiry time and can no longer be approved.
intent_already_resolved409The intent has already been approved, denied, or cancelled.
permit_invalid400The permit token is malformed, has an invalid signature, or has been tampered with.
permit_expired401The permit token has passed its expiry time.
permit_already_used409A single-use permit has already been consumed.
policy_violation403The intent violates one or more project policy rules and was automatically rejected.
unauthorized401The API key is missing, invalid, or does not have access to this project.
forbidden403Your plan does not support this feature or you lack the required role.
rate_limited429You have exceeded the request rate limit. See the Rate Limits page.
project_not_found404The specified project ID does not exist or you do not have access.
approver_not_found422One or more specified approvers do not exist in this project.
webhook_signature_invalid400The webhook signature header does not match the expected HMAC.
internal_error500An unexpected error occurred. Retry with exponential backoff. Contact support if it persists.