Errors

The request has a query parameter this endpoint does not accept.

A parameter has a value this endpoint cannot use. `param` names it.

The cursor is malformed or does not belong to this list. Start again without it.

The path exists but not for this HTTP method. The Allow header lists the methods.

No Authorization header was sent.

The key is unknown, revoked, or not an API key.

The body is not a JSON object (or, on `/v1/events`, not an event or an `events` array), or it is empty where fields are required.

A required body field or header is missing. `param` names it.

The Idempotency-Key header must be 1 to 255 printable ASCII characters.

The body is over 1,000,000 bytes. Split the batch.

A batch holds at most 1,000 events. Split it.

Every event in the batch was rejected, so nothing was queued. Send the same body to `POST /v1/events/validate` for each event's reason.

No source credential was sent. Use `Authorization: Bearer <source secret>` with `Argus-Source: <source id>`, or the HMAC headers `X-Argus-Source`, `X-Argus-Timestamp` and `X-Argus-Signature`.

The source is unknown or revoked, or the bearer secret or HMAC signature is wrong (sign the timestamp, a dot and the raw body, hex HMAC-SHA256). The cases are not distinguished.

The signed timestamp (epoch milliseconds) is more than 5 minutes from server time.

This Idempotency-Key was already used with a different request body or source. Use a new key for a new request.

A request with this Idempotency-Key is still running. Retry with the same key after a moment; it replays the response once the first request finishes.

Too many failed authentication attempts from this address. Wait `Retry-After` seconds. Valid credentials keep working from an address over budget, except that a credential the server has not seen recently gets only a small number of lookups per window, tracked per server instance; a client sharing an address with an attacker can be briefly locked out.

A browser Origin that is not allow-listed called the MCP server. Non-browser clients send no Origin.

This key's type cannot call this endpoint.

No such endpoint.

No provider has this slug.

No connection with this id in the key's project. When a request body names the connection (`param` says where) the status is 422.

No sync with this id in the key's project.

No connect link with this id in the key's project.

No alert rule with this id in the key's project.

The project has no negotiated pricing for this provider.

The provider is unknown or Argus cannot poll it with a credential (telemetry only).

The provider rejected the credential. `message` carries the provider's reason; the credential is never echoed.

Argus could not reach the provider to check the credential. Retry.

Another connection to this provider already has this label. Update that connection instead, or choose another label.

The connection has no credential to poll with (telemetry only) or is suspended, so there is nothing to sync.

The project reached a limit on this kind of resource. `details` holds `resource`, `limit` and `used`.

This operation needs a signed-in session in the Argus app; API keys cannot perform it.

The web app's session is missing, expired or signed out. Only the signed-in web app sees it.

A web-app write did not come from the app itself: it lacks `x-argus-csrf`, or its `Origin` or `Sec-Fetch-Site` is not the app's. API keys never see it.

The key exceeded its request budget. Wait `Retry-After` seconds.

Something failed on our side. Retry; quote `request_id` if it persists.