Sign in Get Started

E02xxx — Auth & identity

Error codes in the E02xxx range that the public Bird API returns. Each code links to its own page (the page its doc_url points at) with the cause and what to do. Retired codes stay listed; they are never renamed or reused.

Code	Name	Status	Message
`E02000`	`AuthenticationFailed`	`401`	Authentication failed. Please check your email and/or password and try again.
`E02001`	`Forbidden`	`403`	You do not have permission to perform this action.
`E02002`	`RevokedAPIKey`	`401`	This API key has been revoked.
`E02004`	`InvalidToken`	`401`	The token is invalid, expired, or already used.
`E02025`	`AccountSuspended`	`401`	Authentication failed. Please contact support.
`E02035`	`InsufficientScope`	`403`	Your credential has not been granted a permission scope this request requires.
`E02036`	`APIKeyExpired`	`401`	This API key has expired. Create a new key to continue.
`E02039`	`SSORequired`	`403`	Access to this organization requires signing in through your organization's identity provider.
`E02055`	—	—	Retired: no longer returned, never reused.
`E02063`	—	—	Retired: no longer returned, never reused.
`E02072`	`InvalidAPIKey`	`401`	This API key is not valid. It may be malformed, mistyped, deleted, or issued for a different region.
`E02084`	`IPAccessRestricted`	`403`	An IP restriction blocks this request.
`E02086`	`MTLSClientCertificateMissing`	`401`	This request presented no client certificate, and the mTLS endpoint requires one.
`E02087`	`MTLSClientCertificateInvalid`	`401`	The client certificate is not valid for this workspace.
`E02088`	`MTLSClientCertificateRevoked`	`401`	The client certificate, or an intermediate certificate in its chain, is revoked.
`E02089`	`MTLSNotEnabled`	`401`	mTLS is not enabled for this workspace, so the mTLS endpoint does not accept its requests.
`E02090`	`MTLSRequired`	`401`	This workspace requires mTLS, so the standard endpoint does not accept this request.
`E02091`	`MTLSCRLUnavailable`	`401`	The certificate revocation list for the client certificate could not be fetched within 5 seconds.
`E02092`	`MTLSCRLTooLarge`	`401`	A certificate revocation list for the client certificate is larger than 10 MiB.
`E02093`	`MTLSCRLLimitReached`	`401`	This workspace already uses 10 certificate revocation lists, the most it can use at a time.
`E02094`	`MTLSCRLInvalid`	`401`	A certificate revocation list for the client certificate has an invalid signature or is past its next update time.
`E02095`	`MTLSCertificateAuthorityInvalid`	`422`	The certificate is not an unexpired PEM-encoded certificate authority that can sign certificates.
`E02096`	`MTLSCertificateAuthorityLimitReached`	`409`	This workspace has reached its quota of certificate authorities.
`E02097`	`MTLSCertificateAuthorityRequired`	`409`	The mTLS state can be evaluating or enforced only when the workspace has a certificate authority.
`E02098`	`MTLSLastCertificateAuthority`	`409`	The last certificate authority cannot be removed while the mTLS state is evaluating or enforced.
`E02099`	`MTLSCertificateAuthorityExists`	`409`	This certificate authority is already registered for the workspace.

Errors: the full wire contract, status mapping, and all code ranges
Error handling: branching on type and code, validation details, and vendor_code

Continue with the documentation, guides and examples for this topic.

Get an implementation brief