This documentation is for WSO2 API Manager 2.0.0. View documentation for the latest release.

Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Updated 900901 description.


Error codeError MessageDescriptionExample
API blockedThis API has been blocked temporarily. Please try again later or contact the system administrators.Invoke an API in the BLOCKED lifecycle state.
Message throttled outThe maximum number of requests that can be made to the API within a designated time period is reached and the API is throttled for the user.Invoke an API exceeding the tier limit.
Hard limit exceededHard throttle limit has been reached.Invoke an API exceeding the hard throttle limitWhen the access token is invalid or inactive.
900802Resource level throttle outMessage is throttled out because resource level has exceeded.Sending/Receiving messages beyond authorized resource level.
900803Application level throttle outMessage is throttled out because application level is exceeded.Sending/Receiving messages beyond authorized application level.
900804Subscription level throttled outMessage throttled out due to subscription level throttling limit reached.Sending/Receiving messages beyond configured throttling limit of subscription level policy.
900805Message blockedAccessing an API which is blocked on user, IP, application, or API Context.An admin user can block API invocations in real time by user, IP, application, or API context. The API invocation meets the blocked condition.
900806Custom policy throttled outMessage throttled out due to exceeding the limit configured through the custom throttling policy rules.The API invocations meet custom throttle policy rules, exceeding the limits of the configured custom policy.
900807Message throttled outMessaged throttled out because of exceeding the burst control/rate limit (requests per second) in the subscription level policy.Sending/Receiving messages exceeding the configured burst control/rate limit within second.rate limit within second.

Unclassified authentication failure

An unspecified error has occurredBackend service for key validation is not accessible when trying to invoke an API

Invalid credentials

Invalid authentication information provided


The error codes 900903 (Access token expired) and 900904 (Access token inactive) are deprecated from API Manager 1.9.0 onwards. Alternatively, error code 900901 will be sent when the token is invalid or inactive.

When the access token is invalid or inactive.

Missing credentials

No authentication information providedAccessing an API without Authorization: Bearer header

Incorrect access token type is provided

The access token type used is not supported when invoking the API. The supported access token types are application and user accesses tokens. See Access Tokens.

Invoke an API with application token, where the resource only allows application user tokens.

No matching resource found in the API for the given request

A resource with the name in the request can not be found in the API.Invoke an API resource that is not available.

The requested API is temporarily blocked

Happens when the API user is blocked.Invoke API resource with a subscription that has been blocked by the API publisher.

Resource forbidden

The user invoking the API has not been granted access to the required resource.Invoke an unsubscribed API.

The subscription to the API is inactive

The status of the API has changed to an inaccessible/unavailable state.Invoke an API resource with a subscription that has not yet been approved by the administrator.

The access token does not allow you to access the requested resource

Can not access the required resource with the provided access token. Check the valid resources that can be accessed with this token.

Invoke an API resource with an access token that is not generated to be used with the resource's scope.
102511Incomplete payloadThe payload sent with the request is too large and the client is unable to keep the connection alive until the payload is completely transferred to the API GatewaySending a large PDF file with the POST request.



Sequences error codes

Error codeDescription
Production/sandbox key offered to the API with no production/sandbox endpoint.
Server cannot process the request due to an error in the request sent by the client.
No matching resource found in the API for the given request.