// // Enterprise · Error Reference
Error Reference
A complete reference of Osapher API and portal error codes — what they mean and how to resolve them.
Authentication Errors
401 Unauthorized— missing or invalid Bearer token. Ensure your API key is included in the Authorization header.403 Forbidden— your account does not have permission for this operation. Check your plan tier and API key scopes.429 Too Many Requests— rate limit exceeded. See Rate Limit Errors below.
Verification Errors
ABN_NOT_FOUND— the ABN provided does not exist in the Australian Business Register. Verify the ABN is correct and active.NZBN_NOT_FOUND— the NZBN provided does not exist in the NZBN register. Verify the NZBN is correct and active.ENTITY_CANCELLED— the ABN or NZBN is registered but the entity has been cancelled. The entity cannot be verified.CONFIDENCE_THRESHOLD_NOT_MET— the registry match confidence score was below the required threshold. Provide more accurate entity details.JURISDICTION_MISMATCH— the jurisdiction specified does not match the registry record. Check whether the entity is AU or NZ.
Registry Errors
ABR_UNAVAILABLE— the Australian Business Register API is temporarily unavailable. Retry after a short delay.NZBN_UNAVAILABLE— the NZBN API is temporarily unavailable. Retry after a short delay.REGISTRY_TIMEOUT— the registry did not respond within the allowed time. Retry the request.
Registry availability
Government registry APIs occasionally experience downtime during maintenance windows. Osapher automatically retries failed registry calls up to 3 times before returning a registry error.
Rate Limit Errors
Osapher enforces rate limits to ensure fair usage across all customers. Rate limits apply per API key.
- Verification requests — 100 requests per minute
- Bulk verification — 10 uploads per hour
- Certificate retrieval — 300 requests per minute
When a rate limit is exceeded, the API returns 429 Too Many Requests with a Retry-After header indicating when the limit resets. Implement exponential backoff in your integration to handle rate limit responses gracefully.
Webhook Errors
WEBHOOK_DELIVERY_FAILED— Osapher could not deliver the webhook payload to your endpoint. Ensure your endpoint returns a 2xx response within 10 seconds.WEBHOOK_SIGNATURE_INVALID— the HMAC-SHA256 signature on the webhook payload does not match. Verify your signing secret in the Webhooks settings.WEBHOOK_ENDPOINT_TIMEOUT— your endpoint did not respond within 10 seconds. Osapher will retry delivery up to 3 times with exponential backoff.