Drop Docs
Errors
Drop uses standard HTTP status codes with predictable JSON error bodies. Merchants should handle validation, auth, idempotency, and operational errors explicitly.
400 Bad Request
Missing Idempotency-Key, invalid store, malformed payload, or missing required query params.
401 Unauthorized
Invalid client credentials, expired bearer token, or missing portal auth token.
403 Forbidden
Merchant app is missing the scope required for the requested operation.
404 Not Found
Order, webhook, or merchant resource does not exist for the authenticated account.
409 Conflict
Idempotency-Key reused with a different request body.
422/Validation
Structured DTO validation failure for fields like phone, enums, or nested payloads.