Skip to main content
Reference for HTTP status codes returned by Vault endpoints.

Success

CodeStatusDescription
200OKRequest succeeded
201CreatedResource created (e.g. token)

Client errors

CodeStatusCommon causes
400Bad RequestInvalid JSON, missing/invalid fields, invalid card number
401UnauthorizedMissing or invalid API key, expired JWT
403ForbiddenMFA required, insufficient permissions, account locked
404Not FoundToken or resource doesn’t exist or was deleted
409ConflictDuplicate resource (e.g. application name)
429Too Many RequestsRate limit exceeded; use retry_after_seconds if present

Server errors

CodeStatusAction
500Internal Server ErrorRetry with backoff
502Bad GatewayProxy/upstream error; retry
503Service UnavailableRetry after delay
504Gateway TimeoutUpstream timeout; retry

Example error body

{
  "success": false,
  "message": "Human-readable error message",
  "data": null
}
For specific messages and troubleshooting, see Common errors. For integration patterns, see Error handling.