Errors

Every non-2xx response returns a standard JSON error envelope.

{
  "detail": "A short, human-readable error message."
}

Common status codes

• 401 — invalid or expired signature, or a timestamp outside the allowed window (rejected by the gateway before your request ever reaches Intasef's core platform)
• 409 — a reused nonce (the gateway has already seen this key/nonce pair — replay protection, rejected before reaching Intasef's core platform)
• 429 — rate limit exceeded (the gateway applies a per-partner rate limit to every request)
• 400 — validation error (e.g. a missing required field, an invalid party value)
• 404 — unknown trade/seller/buyer ID, or an ID that belongs to a different partner (never distinguishable from "doesn't exist" — this is intentional, to avoid confirming another partner's data exists)

A note on 401s and 409s

A 401 from the gateway (bad signature, or a stale timestamp) or a 409 from the gateway (reused nonce) both mean your request never reached Intasef's core platform at all — check your signing implementation first. A 401 from anywhere past that point would indicate a bug on Intasef's side, not yours.