Errors

How an error looks

{ "error": "DEPOSIT_NOT_FOUND", "message": "Deposit '99001' not found", "statusCode": 404 }

Branch on error, never on message. A malformed request answers with message as a list of every parameter to fix:

{ "error": "Bad Request", "message": ["limit must not be greater than 100"], "statusCode": 400 }

A body with error_description, or a bare {"message": "..."}, comes from the gateway before the request reaches the API: check the bearer token (Sandbox and authentication).

Not found

An id that does not exist and an id outside your account answer the same way, so a caller never learns what exists.

Status	`error`	Meaning
`404`	`TOKEN_NOT_FOUND`	Unknown token, or one of a fund you have no relationship with
`404`	`DEPOSIT_NOT_FOUND`	Unknown deposit, or not yours
`404`	`TRANSACTION_NOT_FOUND`	Unknown transaction, or one you are not a party to
`404`	`WEBHOOK_EVENT_NOT_FOUND`	No webhook with this `eventId` or `svix-id` was sent to you
`404`	`INVESTOR_NOT_FOUND`	Your account has no investor record yet; contact Securitize

Bad requests

Status	`error`	Meaning
`400`	`Bad Request`	A parameter is missing or malformed; `message` lists them. The common ones: `tokenId` missing on `GET /deposits` or `GET /transactions`, `limit` over 100, a `direction` or `eventType` that is not one of the listed values, an id that is not digits

A query parameter the API does not know is ignored, not refused: check the spelling of a filter that seems to have no effect.

Limits and faults

Status	`error`	Meaning	What to do
`429`	No body	Over the request limit of your account	Wait `Retry-After` seconds
`502`	`CLIENT_ERROR`	A fault on Securitize’s side	Retry with backoff
`500`	`INTERNAL_SERVER_ERROR`	An unexpected fault	Retry once; contact Securitize if it persists

Treat a code you do not recognise as a refusal of that call.

What is safe to retry

Every operation of this API is a GET: all are safe to repeat.

Getting help

When you contact Securitize about a response, send the operation and the time of the call, the ids involved (tokenId, deposit or transaction id, tokenIssuanceId, eventId), and the error, message and statusCode you received. Never send your client secret or your webhook signing secret.

Get started

Guides

Concepts

Help

API reference