The address.

The request is malformed (code = invalid_request): a bad parameter or header, a missing or malformed Idempotency-Key, or a body member the contract does not have — named, by its path in the body, in errors. Do not retry unchanged.

No valid API key (code = unauthorized): missing, malformed, unknown, revoked or expired, or a wrong secret. The message is worded for an API key — this surface has no session to sign in to.

The key is valid but the request is not allowed: api_access_inactive (the workspace may not use the API right now; reason says why and paidThroughUtc until when it was paid, when known), ip_not_allowed (the key is not accepted from the request's source address), or forbidden (the key lacks the required scope).

The request body is over 256 KiB (code = payload_too_large).

The request body is not application/json (code = unsupported_media_type).

The deposit option cannot be used as asked. Codes: deposit_asset_not_offered (the network or stablecoin is not offered right now — list the options again), deposit_amount_invalid (an amount with more than two decimals), and deposit_account_unavailable (an address cannot be issued for the workspace right now).

A request budget is spent (code = rate_limited): the workspace's 120 requests per minute, the catalog images' 300 per minute, or the per-address limits applied before the key is checked. Retry-After is 60 for a per-minute budget and 1 for the per-address concurrency cap; a per-minute refusal also carries RateLimit-Limit, RateLimit-Remaining (0) and RateLimit-Reset.

Deposits are paused altogether (code = deposits_unavailable). Retry after the delay.