code field, not on the
human-readable error message (which may change), and log the request_id for
support.
Codes
Notes on specific codes
not_foundhides existence. When a key requests an athlete, activity, or export that belongs to another organization — or a key-created export that a different key made — the API returns404, not403. This is deliberate: a key can never learn whether a resource it can’t access exists.key_expiredvskey_revokedvsinvalid_key. These are distinct so your integration can react correctly — prompt for a new key on expiry, alert an admin on revocation, and treatinvalid_keyas a configuration error.feature_not_enabledmeans the organization’s plan does not include Developer API access. Contact the organization’s admin about upgrading to Club.