The API uses standard HTTP status codes. Bodies follow FastAPI’s shape — a detail
field describing the problem.
A note on 404
Requesting a record that belongs to a different organisation returns 404, not 403.
This is deliberate: it prevents callers from probing which IDs exist outside their own org.
From your key’s perspective, anything outside your organisation simply does not exist.
Example
A 401 right after creating a key usually means the Authorization header is wrong.
It must be exactly Token token=ei_live_... — not Bearer ....
