The caller, the account, the permissions and the extensions: { data }. A Scoped API key is answered with every Call History permission false.

• parameter_unknown: a parameter this endpoint does not take, or the legacy account header X-Tenant-Domain-Uuid (the account is named with account_id only).
• parameter_missing: account_id is absent for a caller that must name the account.
• parameter_invalid: account_id is empty, not an account id, or given twice.

No valid credentials: none sent (credentials_missing), an API key that is not valid (key_invalid), a bearer token that is neither an API key nor an app token (credentials_invalid), or an app session that expired (session_expired). Every 401 carries WWW-Authenticate: Bearer, with error="invalid_token" when credentials were sent.

• forbidden: account_id was sent by a caller that reads its own account, or the caller is not a member of the account it is in. A non-member is told nothing about the account.

• reference_not_found: the account named with account_id does not exist or is disabled.

This path doesn't answer this method (method_not_allowed); the Allow header lists the ones it does: GET, HEAD.

Too many requests (rate_limited). Wait retry_after_sec seconds (the Retry-After header), then retry the same request.

Something failed on our side (internal). Quote request_id when you report it.

A temporary condition (try_again). Wait retry_after_sec seconds (the Retry-After header), then retry.