Documentation
Errors
JSON errors include a message and a stable code.
Shape
Failed API calls return { "error": string, "code": string } with Cache-Control: private, no-store.
Auth
| Status | Code | When |
|---|---|---|
| 401 | unauthorized | Missing or invalid session / SIWE signature. |
| 403 | forbidden | Cookie request failed CSRF (bad or missing Origin). |