API

API errors, limits & retries

Handle failures without turning them into duplicate changes.

HTTP status codes

StatusMeaningNext step
200 / 201Successful read or creationParse the documented response format.
204Success without a response bodyDo not call a JSON parser on the empty body.
401Missing, invalid or revoked authenticationCheck the bearer header and active credential.
403Scope, permission, plan or origin restrictionRead the detail message; do not retry unchanged.
404Resource unavailable or not accessibleCheck the identifier and account access.
422Request validation failedInspect the detail entries and fix the named fields.
429Rate limit or operation-specific throttleWait and use a bounded backoff.
502Monitoring backend temporarily unavailableRetry safe reads later with bounded backoff.

Read the error body

Application errors normally include a JSON detail value. Validation errors can use an array of entries with field locations and messages. Preserve useful status and detail information in your integration logs, while removing secrets and sensitive request content.

Example
{"detail":"This API key is read-only"}

Rate limits

API-key requests are limited to 120 requests per minute per key by the current limiter. Some operations have additional limits, such as monitor creation or imports. The limiter is process-local; do not treat the exact boundary across replicas as a guaranteed allowance.

Not every 429 response includes a Retry-After header. Honor it when present, otherwise apply a bounded exponential backoff with jitter. Avoid continuously polling the same resource when a longer refresh interval will do.

Safe retries

Retry safe reads after a temporary connection failure, 429 or suitable 5xx response, with a maximum attempt count. Do not blindly repeat POST requests after a timeout: the first attempt may already have created the resource. This API does not document a general idempotency-key mechanism.

Null data and response compatibility

A null uptime or response-time value means no suitable data was available; it is not zero. Tolerate additional response fields and avoid relying on object key ordering. Use the OpenAPI document for supported request values rather than guessing field names.

When asking for help

Include the method, path, response status and a redacted error message. Never include API keys, host tokens, log-source tokens or private heartbeat URLs. Open a ticket through Support.