Skip to main content
GraphQL responses use HTTP 200 for both successes and application-level errors. Inspect the errors array to know what happened.

Error shape

Error codes are namespaced by area:
  • AUTH-* — authentication and token issues
  • BS-* — general business / validation errors
  • GC-* — gift card operations
  • VC-* — virtual card operations

Domain error codes

Fluz uses prefixed error codes so you can branch on the failing subsystem. Codes not in this list surface as generic validation or server errors.

Troubleshooting

  1. Check scope on AUTH-*. These almost always mean the token was minted without the required scope; mint a new token.
  2. AUTH-0002Re-query before retrying GC-*. Offers and stock change frequently — pull a fresh offer and retry.
  3. Re-query before retrying business errors. GC-0009 (stock) and similar mean the world changed — don’t retry with staleDon’t retry validation errors. VC-* and BS-* codes with 4xx-like intent will fail identically on retry until you fix the input or balance.
  4. Retry transient server errors with backoff and jitterRetry 5xx / network errors with jitter. Money-moving mutations are de-duplicated; see Idempotency.