Decline the print proof for one line
const url = 'https://api.partners.collaterate.com/v1/orders/1/items/1/proof/decline';const options = { method: 'POST', headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'}, body: '{"reason":"COLOR_INCORRECT","comment":"The blue in the logo is reading purple."}'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request POST \ --url https://api.partners.collaterate.com/v1/orders/1/items/1/proof/decline \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "reason": "COLOR_INCORRECT", "comment": "The blue in the logo is reading purple." }'Declines the proof with a reason, sending the line back rather than into production.
reason is a code from this line’s own list
Read GET .../proof/denial-reasons first and send one of its code values. A code that
line does not offer – including one that is valid on a different line – is refused with
422 denial_reason_not_available, and detail lists what is valid. UNKNOWN is never
accepted.
comment is optional and free text, up to 2,000 characters. Several reasons exist
precisely to be paired with one (SEE_COMMENT is “I will describe any issues in the
comments below”), so send it when the reason alone will not tell prepress what to fix.
How the reason is recorded, and why that matters to you
Your reason and comment are recorded together as text on the line’s proof log
entry – the reason’s own wording first, then your comment – which is what the
Collaterate operator working the job reads. Collaterate stores no separate structured
denial-reason field on a line, on this route or on its own storefront one, so there is no
machine-readable “why” to query back afterwards. Two consequences worth designing around:
write a comment that stands on its own, and keep your own record of the code you sent if
you need to report on declines by reason.
Only from PENDING_REVIEW
Identical to approve: 409 proof_not_pending_review unless the line is awaiting a
decision, 409 order_item_cancelled for a cancelled line, and neither reaches
Collaterate. Retrying a decline that already succeeded gets the same 409; treat it as
success.
The response is an acknowledgement, not a re-read
As with approve – see that operation. The reason echoed back is the code you sent.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”The line’s itemNumber, from GET /v1/orders/{orderNumber}/items.
Request Bodyrequired
Section titled “Request Bodyrequired”The body of POST .../proof/decline. Any key other than reason and comment is refused
rather than ignored.
object
A code from GET .../proof/denial-reasons for this line. Never Collaterate’s
numeric denial-reason id, which this API does not publish. A code the line does not
offer is refused with 422 denial_reason_not_available.
Free text recorded with the decline, and what prepress reads to know what to fix.
Some reasons exist to be paired with one – SEE_COMMENT in particular. Omit the
field rather than sending null; whitespace-only is treated as omitted.
Example
{ "reason": "COLOR_INCORRECT", "comment": "The blue in the logo is reading purple."}Responses
Section titled “Responses”The decline was accepted.
The acknowledgement returned by POST .../proof/approve and POST .../proof/decline.
It is what was accepted, not a re-read of the line: a line changing moves no watermark
this API publishes, so there is nothing to converge a read-back against. Read the settled
state from GET /v1/orders/{orderNumber}/items.
object
The decision that was accepted.
The denial-reason code you sent. Present on a decline only, and echoed as the code
rather than the id it was resolved to.
Examples
{ "orderNumber": 1000234, "itemNumber": 884213, "proofStatus": "DECLINED", "reason": "COLOR_INCORRECT"}The path parameters are malformed, the body is not a JSON object, it carries an
unknown key, reason is missing or not a non-empty string, comment is not a string
or is over 2,000 characters, or Collaterate rejected the decision.
RFC 9457 application/problem+json body. code is the published, stable,
machine-readable field to branch your integration logic on – detail is a
human-readable string that may be reworded over time and must not be parsed.
This table is the whole published set: every code this API can return appears below,
and nothing below is unreachable. test/docs/openapi-matches-reality.test.ts compares
the enum to the codes the handlers actually construct, so a code added to one side and
not the other fails the build rather than shipping.
Published code values:
code |
HTTP status | Meaning | Retry? |
|---|---|---|---|
invalid_cursor |
400 | The cursor query parameter could not be decoded. |
No – restart pagination with no cursor. Do not resend the same value. |
invalid_site_id |
400 | The siteId filter is not a positive integer, or it names a site outside your grant. detail says which. |
No – fix the parameter against GET /v1/me’s grantedSiteIds. |
invalid_order_number |
400 | The order number in the path is not a positive integer. | No – fix the path. |
invalid_product_id |
400 | The productId path segment on GET /v1/products/{productId} does not match the SLO_/SLS_-prefixed shape. |
No – fix the path. |
invalid_service_type |
400 | GET /v1/products’s serviceType filter is not one of the values this API can order (STOCK or POD). |
No – fix the parameter. |
updated_since_not_supported |
400 | An updatedSince parameter was sent. Rejected rather than ignored, on purpose – see “No updatedSince / no change polling” above. |
No – remove the parameter; there is no change-polling mechanism to switch to. |
invalid_request |
400 | POST /v1/orders’s request body failed validation – malformed JSON, a missing or malformed field, an unknown key, or a body-level rule such as partnerLineId uniqueness or a misplaced shipTo – or GET /v1/orders/submissions’s status/limit filter is malformed. detail names the exact violation. |
No – fix the request. |
invalid_submission_id |
400 | The submissionId path segment on GET /v1/orders/submissions/{submissionId} is not a well-formed UUID. |
No – fix the path. |
invalid_quantity |
400 | The quantity on POST /v1/products/{productId}/quote is missing or not a positive integer. |
No – fix the request body. |
invalid_shipping_quote_request |
400 | POST /v1/shipping/quote’s body failed validation – malformed JSON, a missing or mistyped field, an unknown key at the top level or inside shipTo, or a weightOunces outside 0 < w <= 5000000. detail names the field. |
No – fix the request body. |
invalid_item_number |
400 | The itemNumber path segment on a proof route is not a positive integer. It is the line’s itemNumber from GET /v1/orders/{orderNumber}/items, never a Collaterate internal id. |
No – fix the path. |
invalid_token |
401 | The credential is missing, expired, or invalid. | No – mint a new token, retry once, then investigate the credential. |
insufficient_scope |
403 | The token lacks the scope required for this operation. | No – mint a token with the required scope. |
order_not_found |
404 | No such order, or one that exists outside your granted sites (see above). | No. |
order_item_not_found |
404 | No line matching (orderNumber, itemNumber) resolves for you – absent, outside your granted sites, or hidden from the customer, identically. |
No. |
product_not_found |
404 | No such product, or one that exists but belongs to a site outside your granted sites (same rule as order_not_found). |
No. |
quote_product_not_found |
404 | The product resolved in our own catalog but Collaterate could not price it. Rare. | No. |
template_not_found |
404 | GET /v1/products/{productId}/template found no Chili template for this product – not TEMPLATE-classified, TEMPLATE-classified with a legacy EDOC/CANVA vendor, or Chili-templated with no document configured. All three identically. |
No. |
submission_not_found |
404 | No submission exists with this id for your credential – whether it never existed or belongs to another partner, identically. | No. |
ordering_not_provisioned |
409 | POST /v1/orders’s siteId has no ordering user configured. This is set up per (partner, site) by staff at onboarding; a partner cannot provision it themselves. |
No – ask Partner Integrations to provision an ordering user for the site, then retry. |
partner_order_id_reused |
409 | POST /v1/orders’s partnerOrderId was already used, with a request body that does not match this one. Resending the identical body under the same partnerOrderId is safe and returns the original submission (see the operation description); reusing it for a materially different order is rejected instead of silently creating a second order. |
No – use a new partnerOrderId, or resend the exact original body to poll the existing submission. |
proof_not_pending_review |
409 | A proof approve or decline was sent for a line whose proofStatus is not PENDING_REVIEW – no proof yet, already decided, or a state this API does not recognise. detail says which. On a RETRY of a decision that already succeeded, this is the expected answer and means success. |
No – read the line’s current proofStatus from GET /v1/orders/{orderNumber}/items. |
order_item_cancelled |
409 | A proof approve or decline was sent for a cancelled line. It will never be produced, so its proof cannot be decided. | No. |
quote_invalid |
422 | Collaterate rejected the quote on business-validation grounds (e.g. quantity over the product’s configured maximum). detail carries Collaterate’s own validation message. |
No – fix the request body (e.g. reduce quantity). |
unknown_country_code |
422 | POST /v1/shipping/quote’s shipTo.country is not a country code Collaterate recognises. |
No – send a code Collaterate carries (US, CA, MX, …). |
unknown_state_code |
422 | POST /v1/shipping/quote’s shipTo.state is not a state or province of the country you sent. State codes are resolved WITHIN the country, since they are not unique across countries. |
No – fix the state, or the country it belongs to. |
shipping_quote_unavailable |
422 | POST /v1/shipping/quote produced no priced service at all for that destination and weight. detail carries Collaterate’s own reasons when it gave any – an invalid postal code for the country is the common one – and says so plainly when it did not. |
No – fix the destination. An empty result is never returned as a 200. |
denial_reason_not_available |
422 | POST .../proof/decline’s reason is well-formed but is not a denial reason this line’s proof offers – including a code that is valid on a different line, and UNKNOWN, which never is. detail lists what is valid here. |
No – pick a code from GET .../proof/denial-reasons for this line. |
rate_limit_exceeded |
429 | Rate limit or daily quota exceeded. | Yes – honor Retry-After. |
internal_error |
500 | Unexpected server-side failure. Detail is always the fixed string below, never the underlying error. | No, or with caution – if persistent, contact Partner Integrations. |
service_unavailable |
503 | Transient failure – typically the database path, but also a Lambda that crashed, timed out, or hit its own concurrency limit before any handler ran. | Yes, with backoff. |
Three statuses are answered by the API gateway before your request reaches application
code: 401 (authorizer denial), 429 (usage-plan throttle), and 503 (the Lambda
integration itself failed). All three are configured to return this same document with
the codes above, so one parser and one branch on code covers every error this API
produces. The 403 on GET /v1/ping is the sole exception anywhere in the API – it
comes from the edge firewall, which is not ours to shape, and carries no problem
document.
object
Always the literal string about:blank today; reserved by RFC 9457 for future use.
Short, human-readable summary of the HTTP status (e.g. “Not Found”).
The HTTP status code, repeated in the body for convenience.
Stable, machine-readable error identifier. Safe to branch on. See the table above.
Human-readable explanation. Do not parse this – it may be reworded without notice.
Echoes the request’s id. Include this when contacting Partner Integrations about a specific failed call – it resolves directly to one log entry.
Example
{ "type": "about:blank", "title": "Bad Request", "status": 400, "code": "invalid_request", "detail": "\"reason\" is required. Use a code from GET /v1/orders/{orderNumber}/items/{itemNumber}/proof/denial-reasons.", "requestId": "8f3c1e2a-..."}Missing, expired, or otherwise invalid credential. Not retryable as-is.
Produced by the API gateway’s authorizer, before the request reaches any application
code, so every cause – no Authorization header, a malformed one, a token that is
expired, wrongly signed, from the wrong pool, or belongs to a credential that has been
disabled – yields this identical response. The gateway is configured to answer in the
same application/problem+json shape as everything else, so you do not need a second
parser for this status; what it cannot do is tell you which of those causes applied.
RFC 9457 application/problem+json body. code is the published, stable,
machine-readable field to branch your integration logic on – detail is a
human-readable string that may be reworded over time and must not be parsed.
This table is the whole published set: every code this API can return appears below,
and nothing below is unreachable. test/docs/openapi-matches-reality.test.ts compares
the enum to the codes the handlers actually construct, so a code added to one side and
not the other fails the build rather than shipping.
Published code values:
code |
HTTP status | Meaning | Retry? |
|---|---|---|---|
invalid_cursor |
400 | The cursor query parameter could not be decoded. |
No – restart pagination with no cursor. Do not resend the same value. |
invalid_site_id |
400 | The siteId filter is not a positive integer, or it names a site outside your grant. detail says which. |
No – fix the parameter against GET /v1/me’s grantedSiteIds. |
invalid_order_number |
400 | The order number in the path is not a positive integer. | No – fix the path. |
invalid_product_id |
400 | The productId path segment on GET /v1/products/{productId} does not match the SLO_/SLS_-prefixed shape. |
No – fix the path. |
invalid_service_type |
400 | GET /v1/products’s serviceType filter is not one of the values this API can order (STOCK or POD). |
No – fix the parameter. |
updated_since_not_supported |
400 | An updatedSince parameter was sent. Rejected rather than ignored, on purpose – see “No updatedSince / no change polling” above. |
No – remove the parameter; there is no change-polling mechanism to switch to. |
invalid_request |
400 | POST /v1/orders’s request body failed validation – malformed JSON, a missing or malformed field, an unknown key, or a body-level rule such as partnerLineId uniqueness or a misplaced shipTo – or GET /v1/orders/submissions’s status/limit filter is malformed. detail names the exact violation. |
No – fix the request. |
invalid_submission_id |
400 | The submissionId path segment on GET /v1/orders/submissions/{submissionId} is not a well-formed UUID. |
No – fix the path. |
invalid_quantity |
400 | The quantity on POST /v1/products/{productId}/quote is missing or not a positive integer. |
No – fix the request body. |
invalid_shipping_quote_request |
400 | POST /v1/shipping/quote’s body failed validation – malformed JSON, a missing or mistyped field, an unknown key at the top level or inside shipTo, or a weightOunces outside 0 < w <= 5000000. detail names the field. |
No – fix the request body. |
invalid_item_number |
400 | The itemNumber path segment on a proof route is not a positive integer. It is the line’s itemNumber from GET /v1/orders/{orderNumber}/items, never a Collaterate internal id. |
No – fix the path. |
invalid_token |
401 | The credential is missing, expired, or invalid. | No – mint a new token, retry once, then investigate the credential. |
insufficient_scope |
403 | The token lacks the scope required for this operation. | No – mint a token with the required scope. |
order_not_found |
404 | No such order, or one that exists outside your granted sites (see above). | No. |
order_item_not_found |
404 | No line matching (orderNumber, itemNumber) resolves for you – absent, outside your granted sites, or hidden from the customer, identically. |
No. |
product_not_found |
404 | No such product, or one that exists but belongs to a site outside your granted sites (same rule as order_not_found). |
No. |
quote_product_not_found |
404 | The product resolved in our own catalog but Collaterate could not price it. Rare. | No. |
template_not_found |
404 | GET /v1/products/{productId}/template found no Chili template for this product – not TEMPLATE-classified, TEMPLATE-classified with a legacy EDOC/CANVA vendor, or Chili-templated with no document configured. All three identically. |
No. |
submission_not_found |
404 | No submission exists with this id for your credential – whether it never existed or belongs to another partner, identically. | No. |
ordering_not_provisioned |
409 | POST /v1/orders’s siteId has no ordering user configured. This is set up per (partner, site) by staff at onboarding; a partner cannot provision it themselves. |
No – ask Partner Integrations to provision an ordering user for the site, then retry. |
partner_order_id_reused |
409 | POST /v1/orders’s partnerOrderId was already used, with a request body that does not match this one. Resending the identical body under the same partnerOrderId is safe and returns the original submission (see the operation description); reusing it for a materially different order is rejected instead of silently creating a second order. |
No – use a new partnerOrderId, or resend the exact original body to poll the existing submission. |
proof_not_pending_review |
409 | A proof approve or decline was sent for a line whose proofStatus is not PENDING_REVIEW – no proof yet, already decided, or a state this API does not recognise. detail says which. On a RETRY of a decision that already succeeded, this is the expected answer and means success. |
No – read the line’s current proofStatus from GET /v1/orders/{orderNumber}/items. |
order_item_cancelled |
409 | A proof approve or decline was sent for a cancelled line. It will never be produced, so its proof cannot be decided. | No. |
quote_invalid |
422 | Collaterate rejected the quote on business-validation grounds (e.g. quantity over the product’s configured maximum). detail carries Collaterate’s own validation message. |
No – fix the request body (e.g. reduce quantity). |
unknown_country_code |
422 | POST /v1/shipping/quote’s shipTo.country is not a country code Collaterate recognises. |
No – send a code Collaterate carries (US, CA, MX, …). |
unknown_state_code |
422 | POST /v1/shipping/quote’s shipTo.state is not a state or province of the country you sent. State codes are resolved WITHIN the country, since they are not unique across countries. |
No – fix the state, or the country it belongs to. |
shipping_quote_unavailable |
422 | POST /v1/shipping/quote produced no priced service at all for that destination and weight. detail carries Collaterate’s own reasons when it gave any – an invalid postal code for the country is the common one – and says so plainly when it did not. |
No – fix the destination. An empty result is never returned as a 200. |
denial_reason_not_available |
422 | POST .../proof/decline’s reason is well-formed but is not a denial reason this line’s proof offers – including a code that is valid on a different line, and UNKNOWN, which never is. detail lists what is valid here. |
No – pick a code from GET .../proof/denial-reasons for this line. |
rate_limit_exceeded |
429 | Rate limit or daily quota exceeded. | Yes – honor Retry-After. |
internal_error |
500 | Unexpected server-side failure. Detail is always the fixed string below, never the underlying error. | No, or with caution – if persistent, contact Partner Integrations. |
service_unavailable |
503 | Transient failure – typically the database path, but also a Lambda that crashed, timed out, or hit its own concurrency limit before any handler ran. | Yes, with backoff. |
Three statuses are answered by the API gateway before your request reaches application
code: 401 (authorizer denial), 429 (usage-plan throttle), and 503 (the Lambda
integration itself failed). All three are configured to return this same document with
the codes above, so one parser and one branch on code covers every error this API
produces. The 403 on GET /v1/ping is the sole exception anywhere in the API – it
comes from the edge firewall, which is not ours to shape, and carries no problem
document.
object
Always the literal string about:blank today; reserved by RFC 9457 for future use.
Short, human-readable summary of the HTTP status (e.g. “Not Found”).
The HTTP status code, repeated in the body for convenience.
Stable, machine-readable error identifier. Safe to branch on. See the table above.
Human-readable explanation. Do not parse this – it may be reworded without notice.
Echoes the request’s id. Include this when contacting Partner Integrations about a specific failed call – it resolves directly to one log entry.
Example
{ "type": "about:blank", "title": "Unauthorized", "status": 401, "code": "invalid_token", "detail": "The credential presented with this request is missing, expired, or invalid.", "requestId": "8f3c1e2a-..."}The credential is valid but lacks the scope required for this operation (for
example, a token minted without partner-api/orders:read). Not retryable as-is –
request a token with the required scope. Not to be confused with an out-of-scope
order, which is a 404 (see above), or with the edge firewall’s 403 on /ping,
which carries no problem document at all.
RFC 9457 application/problem+json body. code is the published, stable,
machine-readable field to branch your integration logic on – detail is a
human-readable string that may be reworded over time and must not be parsed.
This table is the whole published set: every code this API can return appears below,
and nothing below is unreachable. test/docs/openapi-matches-reality.test.ts compares
the enum to the codes the handlers actually construct, so a code added to one side and
not the other fails the build rather than shipping.
Published code values:
code |
HTTP status | Meaning | Retry? |
|---|---|---|---|
invalid_cursor |
400 | The cursor query parameter could not be decoded. |
No – restart pagination with no cursor. Do not resend the same value. |
invalid_site_id |
400 | The siteId filter is not a positive integer, or it names a site outside your grant. detail says which. |
No – fix the parameter against GET /v1/me’s grantedSiteIds. |
invalid_order_number |
400 | The order number in the path is not a positive integer. | No – fix the path. |
invalid_product_id |
400 | The productId path segment on GET /v1/products/{productId} does not match the SLO_/SLS_-prefixed shape. |
No – fix the path. |
invalid_service_type |
400 | GET /v1/products’s serviceType filter is not one of the values this API can order (STOCK or POD). |
No – fix the parameter. |
updated_since_not_supported |
400 | An updatedSince parameter was sent. Rejected rather than ignored, on purpose – see “No updatedSince / no change polling” above. |
No – remove the parameter; there is no change-polling mechanism to switch to. |
invalid_request |
400 | POST /v1/orders’s request body failed validation – malformed JSON, a missing or malformed field, an unknown key, or a body-level rule such as partnerLineId uniqueness or a misplaced shipTo – or GET /v1/orders/submissions’s status/limit filter is malformed. detail names the exact violation. |
No – fix the request. |
invalid_submission_id |
400 | The submissionId path segment on GET /v1/orders/submissions/{submissionId} is not a well-formed UUID. |
No – fix the path. |
invalid_quantity |
400 | The quantity on POST /v1/products/{productId}/quote is missing or not a positive integer. |
No – fix the request body. |
invalid_shipping_quote_request |
400 | POST /v1/shipping/quote’s body failed validation – malformed JSON, a missing or mistyped field, an unknown key at the top level or inside shipTo, or a weightOunces outside 0 < w <= 5000000. detail names the field. |
No – fix the request body. |
invalid_item_number |
400 | The itemNumber path segment on a proof route is not a positive integer. It is the line’s itemNumber from GET /v1/orders/{orderNumber}/items, never a Collaterate internal id. |
No – fix the path. |
invalid_token |
401 | The credential is missing, expired, or invalid. | No – mint a new token, retry once, then investigate the credential. |
insufficient_scope |
403 | The token lacks the scope required for this operation. | No – mint a token with the required scope. |
order_not_found |
404 | No such order, or one that exists outside your granted sites (see above). | No. |
order_item_not_found |
404 | No line matching (orderNumber, itemNumber) resolves for you – absent, outside your granted sites, or hidden from the customer, identically. |
No. |
product_not_found |
404 | No such product, or one that exists but belongs to a site outside your granted sites (same rule as order_not_found). |
No. |
quote_product_not_found |
404 | The product resolved in our own catalog but Collaterate could not price it. Rare. | No. |
template_not_found |
404 | GET /v1/products/{productId}/template found no Chili template for this product – not TEMPLATE-classified, TEMPLATE-classified with a legacy EDOC/CANVA vendor, or Chili-templated with no document configured. All three identically. |
No. |
submission_not_found |
404 | No submission exists with this id for your credential – whether it never existed or belongs to another partner, identically. | No. |
ordering_not_provisioned |
409 | POST /v1/orders’s siteId has no ordering user configured. This is set up per (partner, site) by staff at onboarding; a partner cannot provision it themselves. |
No – ask Partner Integrations to provision an ordering user for the site, then retry. |
partner_order_id_reused |
409 | POST /v1/orders’s partnerOrderId was already used, with a request body that does not match this one. Resending the identical body under the same partnerOrderId is safe and returns the original submission (see the operation description); reusing it for a materially different order is rejected instead of silently creating a second order. |
No – use a new partnerOrderId, or resend the exact original body to poll the existing submission. |
proof_not_pending_review |
409 | A proof approve or decline was sent for a line whose proofStatus is not PENDING_REVIEW – no proof yet, already decided, or a state this API does not recognise. detail says which. On a RETRY of a decision that already succeeded, this is the expected answer and means success. |
No – read the line’s current proofStatus from GET /v1/orders/{orderNumber}/items. |
order_item_cancelled |
409 | A proof approve or decline was sent for a cancelled line. It will never be produced, so its proof cannot be decided. | No. |
quote_invalid |
422 | Collaterate rejected the quote on business-validation grounds (e.g. quantity over the product’s configured maximum). detail carries Collaterate’s own validation message. |
No – fix the request body (e.g. reduce quantity). |
unknown_country_code |
422 | POST /v1/shipping/quote’s shipTo.country is not a country code Collaterate recognises. |
No – send a code Collaterate carries (US, CA, MX, …). |
unknown_state_code |
422 | POST /v1/shipping/quote’s shipTo.state is not a state or province of the country you sent. State codes are resolved WITHIN the country, since they are not unique across countries. |
No – fix the state, or the country it belongs to. |
shipping_quote_unavailable |
422 | POST /v1/shipping/quote produced no priced service at all for that destination and weight. detail carries Collaterate’s own reasons when it gave any – an invalid postal code for the country is the common one – and says so plainly when it did not. |
No – fix the destination. An empty result is never returned as a 200. |
denial_reason_not_available |
422 | POST .../proof/decline’s reason is well-formed but is not a denial reason this line’s proof offers – including a code that is valid on a different line, and UNKNOWN, which never is. detail lists what is valid here. |
No – pick a code from GET .../proof/denial-reasons for this line. |
rate_limit_exceeded |
429 | Rate limit or daily quota exceeded. | Yes – honor Retry-After. |
internal_error |
500 | Unexpected server-side failure. Detail is always the fixed string below, never the underlying error. | No, or with caution – if persistent, contact Partner Integrations. |
service_unavailable |
503 | Transient failure – typically the database path, but also a Lambda that crashed, timed out, or hit its own concurrency limit before any handler ran. | Yes, with backoff. |
Three statuses are answered by the API gateway before your request reaches application
code: 401 (authorizer denial), 429 (usage-plan throttle), and 503 (the Lambda
integration itself failed). All three are configured to return this same document with
the codes above, so one parser and one branch on code covers every error this API
produces. The 403 on GET /v1/ping is the sole exception anywhere in the API – it
comes from the edge firewall, which is not ours to shape, and carries no problem
document.
object
Always the literal string about:blank today; reserved by RFC 9457 for future use.
Short, human-readable summary of the HTTP status (e.g. “Not Found”).
The HTTP status code, repeated in the body for convenience.
Stable, machine-readable error identifier. Safe to branch on. See the table above.
Human-readable explanation. Do not parse this – it may be reworded without notice.
Echoes the request’s id. Include this when contacting Partner Integrations about a specific failed call – it resolves directly to one log entry.
Example
{ "type": "about:blank", "title": "Forbidden", "status": 403, "code": "insufficient_scope", "detail": "This request requires the \"partner-api/orders:read\" scope.", "requestId": "8f3c1e2a-..."}No line matching (orderNumber, itemNumber) resolves for you.
RFC 9457 application/problem+json body. code is the published, stable,
machine-readable field to branch your integration logic on – detail is a
human-readable string that may be reworded over time and must not be parsed.
This table is the whole published set: every code this API can return appears below,
and nothing below is unreachable. test/docs/openapi-matches-reality.test.ts compares
the enum to the codes the handlers actually construct, so a code added to one side and
not the other fails the build rather than shipping.
Published code values:
code |
HTTP status | Meaning | Retry? |
|---|---|---|---|
invalid_cursor |
400 | The cursor query parameter could not be decoded. |
No – restart pagination with no cursor. Do not resend the same value. |
invalid_site_id |
400 | The siteId filter is not a positive integer, or it names a site outside your grant. detail says which. |
No – fix the parameter against GET /v1/me’s grantedSiteIds. |
invalid_order_number |
400 | The order number in the path is not a positive integer. | No – fix the path. |
invalid_product_id |
400 | The productId path segment on GET /v1/products/{productId} does not match the SLO_/SLS_-prefixed shape. |
No – fix the path. |
invalid_service_type |
400 | GET /v1/products’s serviceType filter is not one of the values this API can order (STOCK or POD). |
No – fix the parameter. |
updated_since_not_supported |
400 | An updatedSince parameter was sent. Rejected rather than ignored, on purpose – see “No updatedSince / no change polling” above. |
No – remove the parameter; there is no change-polling mechanism to switch to. |
invalid_request |
400 | POST /v1/orders’s request body failed validation – malformed JSON, a missing or malformed field, an unknown key, or a body-level rule such as partnerLineId uniqueness or a misplaced shipTo – or GET /v1/orders/submissions’s status/limit filter is malformed. detail names the exact violation. |
No – fix the request. |
invalid_submission_id |
400 | The submissionId path segment on GET /v1/orders/submissions/{submissionId} is not a well-formed UUID. |
No – fix the path. |
invalid_quantity |
400 | The quantity on POST /v1/products/{productId}/quote is missing or not a positive integer. |
No – fix the request body. |
invalid_shipping_quote_request |
400 | POST /v1/shipping/quote’s body failed validation – malformed JSON, a missing or mistyped field, an unknown key at the top level or inside shipTo, or a weightOunces outside 0 < w <= 5000000. detail names the field. |
No – fix the request body. |
invalid_item_number |
400 | The itemNumber path segment on a proof route is not a positive integer. It is the line’s itemNumber from GET /v1/orders/{orderNumber}/items, never a Collaterate internal id. |
No – fix the path. |
invalid_token |
401 | The credential is missing, expired, or invalid. | No – mint a new token, retry once, then investigate the credential. |
insufficient_scope |
403 | The token lacks the scope required for this operation. | No – mint a token with the required scope. |
order_not_found |
404 | No such order, or one that exists outside your granted sites (see above). | No. |
order_item_not_found |
404 | No line matching (orderNumber, itemNumber) resolves for you – absent, outside your granted sites, or hidden from the customer, identically. |
No. |
product_not_found |
404 | No such product, or one that exists but belongs to a site outside your granted sites (same rule as order_not_found). |
No. |
quote_product_not_found |
404 | The product resolved in our own catalog but Collaterate could not price it. Rare. | No. |
template_not_found |
404 | GET /v1/products/{productId}/template found no Chili template for this product – not TEMPLATE-classified, TEMPLATE-classified with a legacy EDOC/CANVA vendor, or Chili-templated with no document configured. All three identically. |
No. |
submission_not_found |
404 | No submission exists with this id for your credential – whether it never existed or belongs to another partner, identically. | No. |
ordering_not_provisioned |
409 | POST /v1/orders’s siteId has no ordering user configured. This is set up per (partner, site) by staff at onboarding; a partner cannot provision it themselves. |
No – ask Partner Integrations to provision an ordering user for the site, then retry. |
partner_order_id_reused |
409 | POST /v1/orders’s partnerOrderId was already used, with a request body that does not match this one. Resending the identical body under the same partnerOrderId is safe and returns the original submission (see the operation description); reusing it for a materially different order is rejected instead of silently creating a second order. |
No – use a new partnerOrderId, or resend the exact original body to poll the existing submission. |
proof_not_pending_review |
409 | A proof approve or decline was sent for a line whose proofStatus is not PENDING_REVIEW – no proof yet, already decided, or a state this API does not recognise. detail says which. On a RETRY of a decision that already succeeded, this is the expected answer and means success. |
No – read the line’s current proofStatus from GET /v1/orders/{orderNumber}/items. |
order_item_cancelled |
409 | A proof approve or decline was sent for a cancelled line. It will never be produced, so its proof cannot be decided. | No. |
quote_invalid |
422 | Collaterate rejected the quote on business-validation grounds (e.g. quantity over the product’s configured maximum). detail carries Collaterate’s own validation message. |
No – fix the request body (e.g. reduce quantity). |
unknown_country_code |
422 | POST /v1/shipping/quote’s shipTo.country is not a country code Collaterate recognises. |
No – send a code Collaterate carries (US, CA, MX, …). |
unknown_state_code |
422 | POST /v1/shipping/quote’s shipTo.state is not a state or province of the country you sent. State codes are resolved WITHIN the country, since they are not unique across countries. |
No – fix the state, or the country it belongs to. |
shipping_quote_unavailable |
422 | POST /v1/shipping/quote produced no priced service at all for that destination and weight. detail carries Collaterate’s own reasons when it gave any – an invalid postal code for the country is the common one – and says so plainly when it did not. |
No – fix the destination. An empty result is never returned as a 200. |
denial_reason_not_available |
422 | POST .../proof/decline’s reason is well-formed but is not a denial reason this line’s proof offers – including a code that is valid on a different line, and UNKNOWN, which never is. detail lists what is valid here. |
No – pick a code from GET .../proof/denial-reasons for this line. |
rate_limit_exceeded |
429 | Rate limit or daily quota exceeded. | Yes – honor Retry-After. |
internal_error |
500 | Unexpected server-side failure. Detail is always the fixed string below, never the underlying error. | No, or with caution – if persistent, contact Partner Integrations. |
service_unavailable |
503 | Transient failure – typically the database path, but also a Lambda that crashed, timed out, or hit its own concurrency limit before any handler ran. | Yes, with backoff. |
Three statuses are answered by the API gateway before your request reaches application
code: 401 (authorizer denial), 429 (usage-plan throttle), and 503 (the Lambda
integration itself failed). All three are configured to return this same document with
the codes above, so one parser and one branch on code covers every error this API
produces. The 403 on GET /v1/ping is the sole exception anywhere in the API – it
comes from the edge firewall, which is not ours to shape, and carries no problem
document.
object
Always the literal string about:blank today; reserved by RFC 9457 for future use.
Short, human-readable summary of the HTTP status (e.g. “Not Found”).
The HTTP status code, repeated in the body for convenience.
Stable, machine-readable error identifier. Safe to branch on. See the table above.
Human-readable explanation. Do not parse this – it may be reworded without notice.
Echoes the request’s id. Include this when contacting Partner Integrations about a specific failed call – it resolves directly to one log entry.
Example
{ "type": "about:blank", "title": "Not Found", "status": 404, "code": "order_item_not_found", "detail": "No order line was found matching the request.", "requestId": "8f3c1e2a-..."}The line is not in a state that can take a proof decision – cancelled
(order_item_cancelled), or not PENDING_REVIEW (proof_not_pending_review) – or
Collaterate no longer has the line (monolith_target_missing).
RFC 9457 application/problem+json body. code is the published, stable,
machine-readable field to branch your integration logic on – detail is a
human-readable string that may be reworded over time and must not be parsed.
This table is the whole published set: every code this API can return appears below,
and nothing below is unreachable. test/docs/openapi-matches-reality.test.ts compares
the enum to the codes the handlers actually construct, so a code added to one side and
not the other fails the build rather than shipping.
Published code values:
code |
HTTP status | Meaning | Retry? |
|---|---|---|---|
invalid_cursor |
400 | The cursor query parameter could not be decoded. |
No – restart pagination with no cursor. Do not resend the same value. |
invalid_site_id |
400 | The siteId filter is not a positive integer, or it names a site outside your grant. detail says which. |
No – fix the parameter against GET /v1/me’s grantedSiteIds. |
invalid_order_number |
400 | The order number in the path is not a positive integer. | No – fix the path. |
invalid_product_id |
400 | The productId path segment on GET /v1/products/{productId} does not match the SLO_/SLS_-prefixed shape. |
No – fix the path. |
invalid_service_type |
400 | GET /v1/products’s serviceType filter is not one of the values this API can order (STOCK or POD). |
No – fix the parameter. |
updated_since_not_supported |
400 | An updatedSince parameter was sent. Rejected rather than ignored, on purpose – see “No updatedSince / no change polling” above. |
No – remove the parameter; there is no change-polling mechanism to switch to. |
invalid_request |
400 | POST /v1/orders’s request body failed validation – malformed JSON, a missing or malformed field, an unknown key, or a body-level rule such as partnerLineId uniqueness or a misplaced shipTo – or GET /v1/orders/submissions’s status/limit filter is malformed. detail names the exact violation. |
No – fix the request. |
invalid_submission_id |
400 | The submissionId path segment on GET /v1/orders/submissions/{submissionId} is not a well-formed UUID. |
No – fix the path. |
invalid_quantity |
400 | The quantity on POST /v1/products/{productId}/quote is missing or not a positive integer. |
No – fix the request body. |
invalid_shipping_quote_request |
400 | POST /v1/shipping/quote’s body failed validation – malformed JSON, a missing or mistyped field, an unknown key at the top level or inside shipTo, or a weightOunces outside 0 < w <= 5000000. detail names the field. |
No – fix the request body. |
invalid_item_number |
400 | The itemNumber path segment on a proof route is not a positive integer. It is the line’s itemNumber from GET /v1/orders/{orderNumber}/items, never a Collaterate internal id. |
No – fix the path. |
invalid_token |
401 | The credential is missing, expired, or invalid. | No – mint a new token, retry once, then investigate the credential. |
insufficient_scope |
403 | The token lacks the scope required for this operation. | No – mint a token with the required scope. |
order_not_found |
404 | No such order, or one that exists outside your granted sites (see above). | No. |
order_item_not_found |
404 | No line matching (orderNumber, itemNumber) resolves for you – absent, outside your granted sites, or hidden from the customer, identically. |
No. |
product_not_found |
404 | No such product, or one that exists but belongs to a site outside your granted sites (same rule as order_not_found). |
No. |
quote_product_not_found |
404 | The product resolved in our own catalog but Collaterate could not price it. Rare. | No. |
template_not_found |
404 | GET /v1/products/{productId}/template found no Chili template for this product – not TEMPLATE-classified, TEMPLATE-classified with a legacy EDOC/CANVA vendor, or Chili-templated with no document configured. All three identically. |
No. |
submission_not_found |
404 | No submission exists with this id for your credential – whether it never existed or belongs to another partner, identically. | No. |
ordering_not_provisioned |
409 | POST /v1/orders’s siteId has no ordering user configured. This is set up per (partner, site) by staff at onboarding; a partner cannot provision it themselves. |
No – ask Partner Integrations to provision an ordering user for the site, then retry. |
partner_order_id_reused |
409 | POST /v1/orders’s partnerOrderId was already used, with a request body that does not match this one. Resending the identical body under the same partnerOrderId is safe and returns the original submission (see the operation description); reusing it for a materially different order is rejected instead of silently creating a second order. |
No – use a new partnerOrderId, or resend the exact original body to poll the existing submission. |
proof_not_pending_review |
409 | A proof approve or decline was sent for a line whose proofStatus is not PENDING_REVIEW – no proof yet, already decided, or a state this API does not recognise. detail says which. On a RETRY of a decision that already succeeded, this is the expected answer and means success. |
No – read the line’s current proofStatus from GET /v1/orders/{orderNumber}/items. |
order_item_cancelled |
409 | A proof approve or decline was sent for a cancelled line. It will never be produced, so its proof cannot be decided. | No. |
quote_invalid |
422 | Collaterate rejected the quote on business-validation grounds (e.g. quantity over the product’s configured maximum). detail carries Collaterate’s own validation message. |
No – fix the request body (e.g. reduce quantity). |
unknown_country_code |
422 | POST /v1/shipping/quote’s shipTo.country is not a country code Collaterate recognises. |
No – send a code Collaterate carries (US, CA, MX, …). |
unknown_state_code |
422 | POST /v1/shipping/quote’s shipTo.state is not a state or province of the country you sent. State codes are resolved WITHIN the country, since they are not unique across countries. |
No – fix the state, or the country it belongs to. |
shipping_quote_unavailable |
422 | POST /v1/shipping/quote produced no priced service at all for that destination and weight. detail carries Collaterate’s own reasons when it gave any – an invalid postal code for the country is the common one – and says so plainly when it did not. |
No – fix the destination. An empty result is never returned as a 200. |
denial_reason_not_available |
422 | POST .../proof/decline’s reason is well-formed but is not a denial reason this line’s proof offers – including a code that is valid on a different line, and UNKNOWN, which never is. detail lists what is valid here. |
No – pick a code from GET .../proof/denial-reasons for this line. |
rate_limit_exceeded |
429 | Rate limit or daily quota exceeded. | Yes – honor Retry-After. |
internal_error |
500 | Unexpected server-side failure. Detail is always the fixed string below, never the underlying error. | No, or with caution – if persistent, contact Partner Integrations. |
service_unavailable |
503 | Transient failure – typically the database path, but also a Lambda that crashed, timed out, or hit its own concurrency limit before any handler ran. | Yes, with backoff. |
Three statuses are answered by the API gateway before your request reaches application
code: 401 (authorizer denial), 429 (usage-plan throttle), and 503 (the Lambda
integration itself failed). All three are configured to return this same document with
the codes above, so one parser and one branch on code covers every error this API
produces. The 403 on GET /v1/ping is the sole exception anywhere in the API – it
comes from the edge firewall, which is not ours to shape, and carries no problem
document.
object
Always the literal string about:blank today; reserved by RFC 9457 for future use.
Short, human-readable summary of the HTTP status (e.g. “Not Found”).
The HTTP status code, repeated in the body for convenience.
Stable, machine-readable error identifier. Safe to branch on. See the table above.
Human-readable explanation. Do not parse this – it may be reworded without notice.
Echoes the request’s id. Include this when contacting Partner Integrations about a specific failed call – it resolves directly to one log entry.
Example
{ "type": "about:blank", "title": "Conflict", "status": 409, "code": "order_item_cancelled", "detail": "This line has been cancelled, so its proof can no longer be approved or declined.", "requestId": "8f3c1e2a-..."}reason is well-formed but is not a denial reason this line’s proof offers.
detail lists the codes that are valid for it.
RFC 9457 application/problem+json body. code is the published, stable,
machine-readable field to branch your integration logic on – detail is a
human-readable string that may be reworded over time and must not be parsed.
This table is the whole published set: every code this API can return appears below,
and nothing below is unreachable. test/docs/openapi-matches-reality.test.ts compares
the enum to the codes the handlers actually construct, so a code added to one side and
not the other fails the build rather than shipping.
Published code values:
code |
HTTP status | Meaning | Retry? |
|---|---|---|---|
invalid_cursor |
400 | The cursor query parameter could not be decoded. |
No – restart pagination with no cursor. Do not resend the same value. |
invalid_site_id |
400 | The siteId filter is not a positive integer, or it names a site outside your grant. detail says which. |
No – fix the parameter against GET /v1/me’s grantedSiteIds. |
invalid_order_number |
400 | The order number in the path is not a positive integer. | No – fix the path. |
invalid_product_id |
400 | The productId path segment on GET /v1/products/{productId} does not match the SLO_/SLS_-prefixed shape. |
No – fix the path. |
invalid_service_type |
400 | GET /v1/products’s serviceType filter is not one of the values this API can order (STOCK or POD). |
No – fix the parameter. |
updated_since_not_supported |
400 | An updatedSince parameter was sent. Rejected rather than ignored, on purpose – see “No updatedSince / no change polling” above. |
No – remove the parameter; there is no change-polling mechanism to switch to. |
invalid_request |
400 | POST /v1/orders’s request body failed validation – malformed JSON, a missing or malformed field, an unknown key, or a body-level rule such as partnerLineId uniqueness or a misplaced shipTo – or GET /v1/orders/submissions’s status/limit filter is malformed. detail names the exact violation. |
No – fix the request. |
invalid_submission_id |
400 | The submissionId path segment on GET /v1/orders/submissions/{submissionId} is not a well-formed UUID. |
No – fix the path. |
invalid_quantity |
400 | The quantity on POST /v1/products/{productId}/quote is missing or not a positive integer. |
No – fix the request body. |
invalid_shipping_quote_request |
400 | POST /v1/shipping/quote’s body failed validation – malformed JSON, a missing or mistyped field, an unknown key at the top level or inside shipTo, or a weightOunces outside 0 < w <= 5000000. detail names the field. |
No – fix the request body. |
invalid_item_number |
400 | The itemNumber path segment on a proof route is not a positive integer. It is the line’s itemNumber from GET /v1/orders/{orderNumber}/items, never a Collaterate internal id. |
No – fix the path. |
invalid_token |
401 | The credential is missing, expired, or invalid. | No – mint a new token, retry once, then investigate the credential. |
insufficient_scope |
403 | The token lacks the scope required for this operation. | No – mint a token with the required scope. |
order_not_found |
404 | No such order, or one that exists outside your granted sites (see above). | No. |
order_item_not_found |
404 | No line matching (orderNumber, itemNumber) resolves for you – absent, outside your granted sites, or hidden from the customer, identically. |
No. |
product_not_found |
404 | No such product, or one that exists but belongs to a site outside your granted sites (same rule as order_not_found). |
No. |
quote_product_not_found |
404 | The product resolved in our own catalog but Collaterate could not price it. Rare. | No. |
template_not_found |
404 | GET /v1/products/{productId}/template found no Chili template for this product – not TEMPLATE-classified, TEMPLATE-classified with a legacy EDOC/CANVA vendor, or Chili-templated with no document configured. All three identically. |
No. |
submission_not_found |
404 | No submission exists with this id for your credential – whether it never existed or belongs to another partner, identically. | No. |
ordering_not_provisioned |
409 | POST /v1/orders’s siteId has no ordering user configured. This is set up per (partner, site) by staff at onboarding; a partner cannot provision it themselves. |
No – ask Partner Integrations to provision an ordering user for the site, then retry. |
partner_order_id_reused |
409 | POST /v1/orders’s partnerOrderId was already used, with a request body that does not match this one. Resending the identical body under the same partnerOrderId is safe and returns the original submission (see the operation description); reusing it for a materially different order is rejected instead of silently creating a second order. |
No – use a new partnerOrderId, or resend the exact original body to poll the existing submission. |
proof_not_pending_review |
409 | A proof approve or decline was sent for a line whose proofStatus is not PENDING_REVIEW – no proof yet, already decided, or a state this API does not recognise. detail says which. On a RETRY of a decision that already succeeded, this is the expected answer and means success. |
No – read the line’s current proofStatus from GET /v1/orders/{orderNumber}/items. |
order_item_cancelled |
409 | A proof approve or decline was sent for a cancelled line. It will never be produced, so its proof cannot be decided. | No. |
quote_invalid |
422 | Collaterate rejected the quote on business-validation grounds (e.g. quantity over the product’s configured maximum). detail carries Collaterate’s own validation message. |
No – fix the request body (e.g. reduce quantity). |
unknown_country_code |
422 | POST /v1/shipping/quote’s shipTo.country is not a country code Collaterate recognises. |
No – send a code Collaterate carries (US, CA, MX, …). |
unknown_state_code |
422 | POST /v1/shipping/quote’s shipTo.state is not a state or province of the country you sent. State codes are resolved WITHIN the country, since they are not unique across countries. |
No – fix the state, or the country it belongs to. |
shipping_quote_unavailable |
422 | POST /v1/shipping/quote produced no priced service at all for that destination and weight. detail carries Collaterate’s own reasons when it gave any – an invalid postal code for the country is the common one – and says so plainly when it did not. |
No – fix the destination. An empty result is never returned as a 200. |
denial_reason_not_available |
422 | POST .../proof/decline’s reason is well-formed but is not a denial reason this line’s proof offers – including a code that is valid on a different line, and UNKNOWN, which never is. detail lists what is valid here. |
No – pick a code from GET .../proof/denial-reasons for this line. |
rate_limit_exceeded |
429 | Rate limit or daily quota exceeded. | Yes – honor Retry-After. |
internal_error |
500 | Unexpected server-side failure. Detail is always the fixed string below, never the underlying error. | No, or with caution – if persistent, contact Partner Integrations. |
service_unavailable |
503 | Transient failure – typically the database path, but also a Lambda that crashed, timed out, or hit its own concurrency limit before any handler ran. | Yes, with backoff. |
Three statuses are answered by the API gateway before your request reaches application
code: 401 (authorizer denial), 429 (usage-plan throttle), and 503 (the Lambda
integration itself failed). All three are configured to return this same document with
the codes above, so one parser and one branch on code covers every error this API
produces. The 403 on GET /v1/ping is the sole exception anywhere in the API – it
comes from the edge firewall, which is not ours to shape, and carries no problem
document.
object
Always the literal string about:blank today; reserved by RFC 9457 for future use.
Short, human-readable summary of the HTTP status (e.g. “Not Found”).
The HTTP status code, repeated in the body for convenience.
Stable, machine-readable error identifier. Safe to branch on. See the table above.
Human-readable explanation. Do not parse this – it may be reworded without notice.
Echoes the request’s id. Include this when contacting Partner Integrations about a specific failed call – it resolves directly to one log entry.
Example
{ "type": "about:blank", "title": "Unprocessable Entity", "status": 422, "code": "denial_reason_not_available", "detail": "\"NO_PROOF_CYCLE\" is not a denial reason this line's proof offers. Valid reasons for this line: NEW_FILES_TO_FOLLOW, PROOF_DOES_NOT_MATCH_FILE, COLOR_INCORRECT. See GET /v1/orders/{orderNumber}/items/{itemNumber}/proof/denial-reasons.", "requestId": "8f3c1e2a-..."}Your rate limit or daily quota was exceeded. Retryable – honor the Retry-After
header (seconds) before your next attempt.
Like the 401, this comes from the gateway’s usage plan rather than from application code, and is configured to carry the same problem document as every other error so a single parser covers the whole API.
RFC 9457 application/problem+json body. code is the published, stable,
machine-readable field to branch your integration logic on – detail is a
human-readable string that may be reworded over time and must not be parsed.
This table is the whole published set: every code this API can return appears below,
and nothing below is unreachable. test/docs/openapi-matches-reality.test.ts compares
the enum to the codes the handlers actually construct, so a code added to one side and
not the other fails the build rather than shipping.
Published code values:
code |
HTTP status | Meaning | Retry? |
|---|---|---|---|
invalid_cursor |
400 | The cursor query parameter could not be decoded. |
No – restart pagination with no cursor. Do not resend the same value. |
invalid_site_id |
400 | The siteId filter is not a positive integer, or it names a site outside your grant. detail says which. |
No – fix the parameter against GET /v1/me’s grantedSiteIds. |
invalid_order_number |
400 | The order number in the path is not a positive integer. | No – fix the path. |
invalid_product_id |
400 | The productId path segment on GET /v1/products/{productId} does not match the SLO_/SLS_-prefixed shape. |
No – fix the path. |
invalid_service_type |
400 | GET /v1/products’s serviceType filter is not one of the values this API can order (STOCK or POD). |
No – fix the parameter. |
updated_since_not_supported |
400 | An updatedSince parameter was sent. Rejected rather than ignored, on purpose – see “No updatedSince / no change polling” above. |
No – remove the parameter; there is no change-polling mechanism to switch to. |
invalid_request |
400 | POST /v1/orders’s request body failed validation – malformed JSON, a missing or malformed field, an unknown key, or a body-level rule such as partnerLineId uniqueness or a misplaced shipTo – or GET /v1/orders/submissions’s status/limit filter is malformed. detail names the exact violation. |
No – fix the request. |
invalid_submission_id |
400 | The submissionId path segment on GET /v1/orders/submissions/{submissionId} is not a well-formed UUID. |
No – fix the path. |
invalid_quantity |
400 | The quantity on POST /v1/products/{productId}/quote is missing or not a positive integer. |
No – fix the request body. |
invalid_shipping_quote_request |
400 | POST /v1/shipping/quote’s body failed validation – malformed JSON, a missing or mistyped field, an unknown key at the top level or inside shipTo, or a weightOunces outside 0 < w <= 5000000. detail names the field. |
No – fix the request body. |
invalid_item_number |
400 | The itemNumber path segment on a proof route is not a positive integer. It is the line’s itemNumber from GET /v1/orders/{orderNumber}/items, never a Collaterate internal id. |
No – fix the path. |
invalid_token |
401 | The credential is missing, expired, or invalid. | No – mint a new token, retry once, then investigate the credential. |
insufficient_scope |
403 | The token lacks the scope required for this operation. | No – mint a token with the required scope. |
order_not_found |
404 | No such order, or one that exists outside your granted sites (see above). | No. |
order_item_not_found |
404 | No line matching (orderNumber, itemNumber) resolves for you – absent, outside your granted sites, or hidden from the customer, identically. |
No. |
product_not_found |
404 | No such product, or one that exists but belongs to a site outside your granted sites (same rule as order_not_found). |
No. |
quote_product_not_found |
404 | The product resolved in our own catalog but Collaterate could not price it. Rare. | No. |
template_not_found |
404 | GET /v1/products/{productId}/template found no Chili template for this product – not TEMPLATE-classified, TEMPLATE-classified with a legacy EDOC/CANVA vendor, or Chili-templated with no document configured. All three identically. |
No. |
submission_not_found |
404 | No submission exists with this id for your credential – whether it never existed or belongs to another partner, identically. | No. |
ordering_not_provisioned |
409 | POST /v1/orders’s siteId has no ordering user configured. This is set up per (partner, site) by staff at onboarding; a partner cannot provision it themselves. |
No – ask Partner Integrations to provision an ordering user for the site, then retry. |
partner_order_id_reused |
409 | POST /v1/orders’s partnerOrderId was already used, with a request body that does not match this one. Resending the identical body under the same partnerOrderId is safe and returns the original submission (see the operation description); reusing it for a materially different order is rejected instead of silently creating a second order. |
No – use a new partnerOrderId, or resend the exact original body to poll the existing submission. |
proof_not_pending_review |
409 | A proof approve or decline was sent for a line whose proofStatus is not PENDING_REVIEW – no proof yet, already decided, or a state this API does not recognise. detail says which. On a RETRY of a decision that already succeeded, this is the expected answer and means success. |
No – read the line’s current proofStatus from GET /v1/orders/{orderNumber}/items. |
order_item_cancelled |
409 | A proof approve or decline was sent for a cancelled line. It will never be produced, so its proof cannot be decided. | No. |
quote_invalid |
422 | Collaterate rejected the quote on business-validation grounds (e.g. quantity over the product’s configured maximum). detail carries Collaterate’s own validation message. |
No – fix the request body (e.g. reduce quantity). |
unknown_country_code |
422 | POST /v1/shipping/quote’s shipTo.country is not a country code Collaterate recognises. |
No – send a code Collaterate carries (US, CA, MX, …). |
unknown_state_code |
422 | POST /v1/shipping/quote’s shipTo.state is not a state or province of the country you sent. State codes are resolved WITHIN the country, since they are not unique across countries. |
No – fix the state, or the country it belongs to. |
shipping_quote_unavailable |
422 | POST /v1/shipping/quote produced no priced service at all for that destination and weight. detail carries Collaterate’s own reasons when it gave any – an invalid postal code for the country is the common one – and says so plainly when it did not. |
No – fix the destination. An empty result is never returned as a 200. |
denial_reason_not_available |
422 | POST .../proof/decline’s reason is well-formed but is not a denial reason this line’s proof offers – including a code that is valid on a different line, and UNKNOWN, which never is. detail lists what is valid here. |
No – pick a code from GET .../proof/denial-reasons for this line. |
rate_limit_exceeded |
429 | Rate limit or daily quota exceeded. | Yes – honor Retry-After. |
internal_error |
500 | Unexpected server-side failure. Detail is always the fixed string below, never the underlying error. | No, or with caution – if persistent, contact Partner Integrations. |
service_unavailable |
503 | Transient failure – typically the database path, but also a Lambda that crashed, timed out, or hit its own concurrency limit before any handler ran. | Yes, with backoff. |
Three statuses are answered by the API gateway before your request reaches application
code: 401 (authorizer denial), 429 (usage-plan throttle), and 503 (the Lambda
integration itself failed). All three are configured to return this same document with
the codes above, so one parser and one branch on code covers every error this API
produces. The 403 on GET /v1/ping is the sole exception anywhere in the API – it
comes from the edge firewall, which is not ours to shape, and carries no problem
document.
object
Always the literal string about:blank today; reserved by RFC 9457 for future use.
Short, human-readable summary of the HTTP status (e.g. “Not Found”).
The HTTP status code, repeated in the body for convenience.
Stable, machine-readable error identifier. Safe to branch on. See the table above.
Human-readable explanation. Do not parse this – it may be reworded without notice.
Echoes the request’s id. Include this when contacting Partner Integrations about a specific failed call – it resolves directly to one log entry.
Example
{ "type": "about:blank", "title": "Too Many Requests", "status": 429, "code": "rate_limit_exceeded", "detail": "The request rate limit has been exceeded. Retry after the indicated delay.", "requestId": "8f3c1e2a-..."}Headers
Section titled “Headers”Seconds to wait before retrying.
An unexpected server-side failure. detail is always the fixed string below and never
the underlying error – a database message quoted back to a partner is a disclosure,
so nothing is interpolated into it. The requestId resolves to the log entry that does
carry the cause; send it to Partner Integrations rather than guessing.
RFC 9457 application/problem+json body. code is the published, stable,
machine-readable field to branch your integration logic on – detail is a
human-readable string that may be reworded over time and must not be parsed.
This table is the whole published set: every code this API can return appears below,
and nothing below is unreachable. test/docs/openapi-matches-reality.test.ts compares
the enum to the codes the handlers actually construct, so a code added to one side and
not the other fails the build rather than shipping.
Published code values:
code |
HTTP status | Meaning | Retry? |
|---|---|---|---|
invalid_cursor |
400 | The cursor query parameter could not be decoded. |
No – restart pagination with no cursor. Do not resend the same value. |
invalid_site_id |
400 | The siteId filter is not a positive integer, or it names a site outside your grant. detail says which. |
No – fix the parameter against GET /v1/me’s grantedSiteIds. |
invalid_order_number |
400 | The order number in the path is not a positive integer. | No – fix the path. |
invalid_product_id |
400 | The productId path segment on GET /v1/products/{productId} does not match the SLO_/SLS_-prefixed shape. |
No – fix the path. |
invalid_service_type |
400 | GET /v1/products’s serviceType filter is not one of the values this API can order (STOCK or POD). |
No – fix the parameter. |
updated_since_not_supported |
400 | An updatedSince parameter was sent. Rejected rather than ignored, on purpose – see “No updatedSince / no change polling” above. |
No – remove the parameter; there is no change-polling mechanism to switch to. |
invalid_request |
400 | POST /v1/orders’s request body failed validation – malformed JSON, a missing or malformed field, an unknown key, or a body-level rule such as partnerLineId uniqueness or a misplaced shipTo – or GET /v1/orders/submissions’s status/limit filter is malformed. detail names the exact violation. |
No – fix the request. |
invalid_submission_id |
400 | The submissionId path segment on GET /v1/orders/submissions/{submissionId} is not a well-formed UUID. |
No – fix the path. |
invalid_quantity |
400 | The quantity on POST /v1/products/{productId}/quote is missing or not a positive integer. |
No – fix the request body. |
invalid_shipping_quote_request |
400 | POST /v1/shipping/quote’s body failed validation – malformed JSON, a missing or mistyped field, an unknown key at the top level or inside shipTo, or a weightOunces outside 0 < w <= 5000000. detail names the field. |
No – fix the request body. |
invalid_item_number |
400 | The itemNumber path segment on a proof route is not a positive integer. It is the line’s itemNumber from GET /v1/orders/{orderNumber}/items, never a Collaterate internal id. |
No – fix the path. |
invalid_token |
401 | The credential is missing, expired, or invalid. | No – mint a new token, retry once, then investigate the credential. |
insufficient_scope |
403 | The token lacks the scope required for this operation. | No – mint a token with the required scope. |
order_not_found |
404 | No such order, or one that exists outside your granted sites (see above). | No. |
order_item_not_found |
404 | No line matching (orderNumber, itemNumber) resolves for you – absent, outside your granted sites, or hidden from the customer, identically. |
No. |
product_not_found |
404 | No such product, or one that exists but belongs to a site outside your granted sites (same rule as order_not_found). |
No. |
quote_product_not_found |
404 | The product resolved in our own catalog but Collaterate could not price it. Rare. | No. |
template_not_found |
404 | GET /v1/products/{productId}/template found no Chili template for this product – not TEMPLATE-classified, TEMPLATE-classified with a legacy EDOC/CANVA vendor, or Chili-templated with no document configured. All three identically. |
No. |
submission_not_found |
404 | No submission exists with this id for your credential – whether it never existed or belongs to another partner, identically. | No. |
ordering_not_provisioned |
409 | POST /v1/orders’s siteId has no ordering user configured. This is set up per (partner, site) by staff at onboarding; a partner cannot provision it themselves. |
No – ask Partner Integrations to provision an ordering user for the site, then retry. |
partner_order_id_reused |
409 | POST /v1/orders’s partnerOrderId was already used, with a request body that does not match this one. Resending the identical body under the same partnerOrderId is safe and returns the original submission (see the operation description); reusing it for a materially different order is rejected instead of silently creating a second order. |
No – use a new partnerOrderId, or resend the exact original body to poll the existing submission. |
proof_not_pending_review |
409 | A proof approve or decline was sent for a line whose proofStatus is not PENDING_REVIEW – no proof yet, already decided, or a state this API does not recognise. detail says which. On a RETRY of a decision that already succeeded, this is the expected answer and means success. |
No – read the line’s current proofStatus from GET /v1/orders/{orderNumber}/items. |
order_item_cancelled |
409 | A proof approve or decline was sent for a cancelled line. It will never be produced, so its proof cannot be decided. | No. |
quote_invalid |
422 | Collaterate rejected the quote on business-validation grounds (e.g. quantity over the product’s configured maximum). detail carries Collaterate’s own validation message. |
No – fix the request body (e.g. reduce quantity). |
unknown_country_code |
422 | POST /v1/shipping/quote’s shipTo.country is not a country code Collaterate recognises. |
No – send a code Collaterate carries (US, CA, MX, …). |
unknown_state_code |
422 | POST /v1/shipping/quote’s shipTo.state is not a state or province of the country you sent. State codes are resolved WITHIN the country, since they are not unique across countries. |
No – fix the state, or the country it belongs to. |
shipping_quote_unavailable |
422 | POST /v1/shipping/quote produced no priced service at all for that destination and weight. detail carries Collaterate’s own reasons when it gave any – an invalid postal code for the country is the common one – and says so plainly when it did not. |
No – fix the destination. An empty result is never returned as a 200. |
denial_reason_not_available |
422 | POST .../proof/decline’s reason is well-formed but is not a denial reason this line’s proof offers – including a code that is valid on a different line, and UNKNOWN, which never is. detail lists what is valid here. |
No – pick a code from GET .../proof/denial-reasons for this line. |
rate_limit_exceeded |
429 | Rate limit or daily quota exceeded. | Yes – honor Retry-After. |
internal_error |
500 | Unexpected server-side failure. Detail is always the fixed string below, never the underlying error. | No, or with caution – if persistent, contact Partner Integrations. |
service_unavailable |
503 | Transient failure – typically the database path, but also a Lambda that crashed, timed out, or hit its own concurrency limit before any handler ran. | Yes, with backoff. |
Three statuses are answered by the API gateway before your request reaches application
code: 401 (authorizer denial), 429 (usage-plan throttle), and 503 (the Lambda
integration itself failed). All three are configured to return this same document with
the codes above, so one parser and one branch on code covers every error this API
produces. The 403 on GET /v1/ping is the sole exception anywhere in the API – it
comes from the edge firewall, which is not ours to shape, and carries no problem
document.
object
Always the literal string about:blank today; reserved by RFC 9457 for future use.
Short, human-readable summary of the HTTP status (e.g. “Not Found”).
The HTTP status code, repeated in the body for convenience.
Stable, machine-readable error identifier. Safe to branch on. See the table above.
Human-readable explanation. Do not parse this – it may be reworded without notice.
Echoes the request’s id. Include this when contacting Partner Integrations about a specific failed call – it resolves directly to one log entry.
Example
{ "type": "about:blank", "title": "Internal Server Error", "status": 500, "code": "internal_error", "detail": "An unexpected error occurred.", "requestId": "8f3c1e2a-..."}Transient failure in the service or the database it reads from (for example, the Aurora reader could not be reached in time), or the request never reached application code at all because the Lambda behind it crashed, timed out, or hit its own concurrency limit. Retryable, with backoff.
RFC 9457 application/problem+json body. code is the published, stable,
machine-readable field to branch your integration logic on – detail is a
human-readable string that may be reworded over time and must not be parsed.
This table is the whole published set: every code this API can return appears below,
and nothing below is unreachable. test/docs/openapi-matches-reality.test.ts compares
the enum to the codes the handlers actually construct, so a code added to one side and
not the other fails the build rather than shipping.
Published code values:
code |
HTTP status | Meaning | Retry? |
|---|---|---|---|
invalid_cursor |
400 | The cursor query parameter could not be decoded. |
No – restart pagination with no cursor. Do not resend the same value. |
invalid_site_id |
400 | The siteId filter is not a positive integer, or it names a site outside your grant. detail says which. |
No – fix the parameter against GET /v1/me’s grantedSiteIds. |
invalid_order_number |
400 | The order number in the path is not a positive integer. | No – fix the path. |
invalid_product_id |
400 | The productId path segment on GET /v1/products/{productId} does not match the SLO_/SLS_-prefixed shape. |
No – fix the path. |
invalid_service_type |
400 | GET /v1/products’s serviceType filter is not one of the values this API can order (STOCK or POD). |
No – fix the parameter. |
updated_since_not_supported |
400 | An updatedSince parameter was sent. Rejected rather than ignored, on purpose – see “No updatedSince / no change polling” above. |
No – remove the parameter; there is no change-polling mechanism to switch to. |
invalid_request |
400 | POST /v1/orders’s request body failed validation – malformed JSON, a missing or malformed field, an unknown key, or a body-level rule such as partnerLineId uniqueness or a misplaced shipTo – or GET /v1/orders/submissions’s status/limit filter is malformed. detail names the exact violation. |
No – fix the request. |
invalid_submission_id |
400 | The submissionId path segment on GET /v1/orders/submissions/{submissionId} is not a well-formed UUID. |
No – fix the path. |
invalid_quantity |
400 | The quantity on POST /v1/products/{productId}/quote is missing or not a positive integer. |
No – fix the request body. |
invalid_shipping_quote_request |
400 | POST /v1/shipping/quote’s body failed validation – malformed JSON, a missing or mistyped field, an unknown key at the top level or inside shipTo, or a weightOunces outside 0 < w <= 5000000. detail names the field. |
No – fix the request body. |
invalid_item_number |
400 | The itemNumber path segment on a proof route is not a positive integer. It is the line’s itemNumber from GET /v1/orders/{orderNumber}/items, never a Collaterate internal id. |
No – fix the path. |
invalid_token |
401 | The credential is missing, expired, or invalid. | No – mint a new token, retry once, then investigate the credential. |
insufficient_scope |
403 | The token lacks the scope required for this operation. | No – mint a token with the required scope. |
order_not_found |
404 | No such order, or one that exists outside your granted sites (see above). | No. |
order_item_not_found |
404 | No line matching (orderNumber, itemNumber) resolves for you – absent, outside your granted sites, or hidden from the customer, identically. |
No. |
product_not_found |
404 | No such product, or one that exists but belongs to a site outside your granted sites (same rule as order_not_found). |
No. |
quote_product_not_found |
404 | The product resolved in our own catalog but Collaterate could not price it. Rare. | No. |
template_not_found |
404 | GET /v1/products/{productId}/template found no Chili template for this product – not TEMPLATE-classified, TEMPLATE-classified with a legacy EDOC/CANVA vendor, or Chili-templated with no document configured. All three identically. |
No. |
submission_not_found |
404 | No submission exists with this id for your credential – whether it never existed or belongs to another partner, identically. | No. |
ordering_not_provisioned |
409 | POST /v1/orders’s siteId has no ordering user configured. This is set up per (partner, site) by staff at onboarding; a partner cannot provision it themselves. |
No – ask Partner Integrations to provision an ordering user for the site, then retry. |
partner_order_id_reused |
409 | POST /v1/orders’s partnerOrderId was already used, with a request body that does not match this one. Resending the identical body under the same partnerOrderId is safe and returns the original submission (see the operation description); reusing it for a materially different order is rejected instead of silently creating a second order. |
No – use a new partnerOrderId, or resend the exact original body to poll the existing submission. |
proof_not_pending_review |
409 | A proof approve or decline was sent for a line whose proofStatus is not PENDING_REVIEW – no proof yet, already decided, or a state this API does not recognise. detail says which. On a RETRY of a decision that already succeeded, this is the expected answer and means success. |
No – read the line’s current proofStatus from GET /v1/orders/{orderNumber}/items. |
order_item_cancelled |
409 | A proof approve or decline was sent for a cancelled line. It will never be produced, so its proof cannot be decided. | No. |
quote_invalid |
422 | Collaterate rejected the quote on business-validation grounds (e.g. quantity over the product’s configured maximum). detail carries Collaterate’s own validation message. |
No – fix the request body (e.g. reduce quantity). |
unknown_country_code |
422 | POST /v1/shipping/quote’s shipTo.country is not a country code Collaterate recognises. |
No – send a code Collaterate carries (US, CA, MX, …). |
unknown_state_code |
422 | POST /v1/shipping/quote’s shipTo.state is not a state or province of the country you sent. State codes are resolved WITHIN the country, since they are not unique across countries. |
No – fix the state, or the country it belongs to. |
shipping_quote_unavailable |
422 | POST /v1/shipping/quote produced no priced service at all for that destination and weight. detail carries Collaterate’s own reasons when it gave any – an invalid postal code for the country is the common one – and says so plainly when it did not. |
No – fix the destination. An empty result is never returned as a 200. |
denial_reason_not_available |
422 | POST .../proof/decline’s reason is well-formed but is not a denial reason this line’s proof offers – including a code that is valid on a different line, and UNKNOWN, which never is. detail lists what is valid here. |
No – pick a code from GET .../proof/denial-reasons for this line. |
rate_limit_exceeded |
429 | Rate limit or daily quota exceeded. | Yes – honor Retry-After. |
internal_error |
500 | Unexpected server-side failure. Detail is always the fixed string below, never the underlying error. | No, or with caution – if persistent, contact Partner Integrations. |
service_unavailable |
503 | Transient failure – typically the database path, but also a Lambda that crashed, timed out, or hit its own concurrency limit before any handler ran. | Yes, with backoff. |
Three statuses are answered by the API gateway before your request reaches application
code: 401 (authorizer denial), 429 (usage-plan throttle), and 503 (the Lambda
integration itself failed). All three are configured to return this same document with
the codes above, so one parser and one branch on code covers every error this API
produces. The 403 on GET /v1/ping is the sole exception anywhere in the API – it
comes from the edge firewall, which is not ours to shape, and carries no problem
document.
object
Always the literal string about:blank today; reserved by RFC 9457 for future use.
Short, human-readable summary of the HTTP status (e.g. “Not Found”).
The HTTP status code, repeated in the body for convenience.
Stable, machine-readable error identifier. Safe to branch on. See the table above.
Human-readable explanation. Do not parse this – it may be reworded without notice.
Echoes the request’s id. Include this when contacting Partner Integrations about a specific failed call – it resolves directly to one log entry.
Example
{ "type": "about:blank", "title": "Service Unavailable", "status": 503, "code": "service_unavailable", "detail": "The service is temporarily unavailable. Please retry.", "requestId": "8f3c1e2a-..."}