Errors
Find the cause and retry safely.
HTTP errors
| Field | Type | Required | Description |
|---|---|---|---|
401 | HTTP | — | Use a valid Bearer key. |
403 | HTTP | — | Check scopes, workspace access and live eligibility. |
409 | HTTP | — | The request conflicts with an existing payment. Retry the same body and key. |
422 | HTTP | — | Check amount, invoice_id and public HTTPS URLs. |
429 | HTTP | — | Wait for Retry-After before retrying. |
503 | HTTP | — | A dependency is unavailable. Check status and retry safely. |
Error response
422 Unprocessable Content
{
"error": {
"code": "INVALID_REQUEST",
"message": "Check the submitted fields.",
"retryable": false,
"correlation_id": "REQUEST_CORRELATION_ID"
}
}Rate limits
The current merchant handler permits 120 requests per minute per workspace and HTTP method, per running API process. A 429 response sets Retry-After: 60. This is not a global throughput guarantee.
Workspace payment allowance
Every API key, website, app and bot in a workspace shares its purchased allowance. A new Live checkout reserves a slot; successful verification consumes it once. Unpaid expiry or cancellation releases it. Verification and webhook retries do not consume another slot. Quota is attributed to the checkout's creation period, including verification that completes later.
| Field | Type | Required | Description |
|---|---|---|---|
SUBSCRIPTION_REQUIRED | 403 | — | Activate or renew your plan before a new Live checkout. |
PAYMENT_ALLOWANCE_EXHAUSTED | 403 | — | Upgrade or wait for the shown allowance reset. |
ACTIVE_CHECKOUT_LIMIT | 429 | — | Wait for existing unpaid checkouts to complete or expire. |
PLAN_RATE_LIMITED | 429 | — | Respect Retry-After; the workspace creation rate is shared across API processes. |
PLAN_RESOURCE_LIMIT | 403 | — | Remove an unused resource or upgrade your plan. |
Subscription expiry and quota exhaustion stop new checkout creation. Existing payment verification, receipt forwarding, refunds and webhook delivery continue. Sandbox does not spend Live allowance. Redirect URLs are optional for app and bot integrations; authenticate and verify payments on your server.