Skip to main content

Error codes

Learn how to resolve the most common error codes.

Common error codes

400 Bad Request

Check that all parameters (including Expression Constraint Language expressions) are correctly encoded.

401 Unauthorized

Ensure you're passing a valid bearer token in the header: Authorization: Bearer XXX.

Tokens typically expire after 30 minutes – refresh if needed.

403 Forbidden

Verify your token claims and permissions. Use JWT.IO to debug tokens.

404 Not Found

Some content requires authentication or licensing (for example, SNOMED CT). Authenticate to access restricted resources.

422 Unprocessable Entity

Requests that are too costly (for example, $expand on greater than 50,000 concepts) will fail. Contact us for bulk access options.

502 Bad Gateway

The Web Application Firewall (WAF) may block certain queries. If your request is valid, raise a helpdesk ticket to adjust WAF rules.


Other error codes

If your error is not listed, please contact us.

Last edited: 28 May 2026 4:45 pm