Content Gateway Errors
Gateway Errors
All gateways should expose the following error codes to Moveworks. The error code and message format should follow exactly as below. The API gateway should make limited-to-no changes to error messages exposed by underlying systems.
Error Codes
400 INPUT_VALIDATION_FAILED
Moveworks submitted an invalid request to the gateway.
401 AUTHENTICATION_FAILED
The provided credential by Moveworks is invalid or missing. This is NOT the same as authentication failing between the gateway and your downstream systems.
404 NOT_FOUND
The resource identifier Moveworks is requesting is missing.
429 RATE_LIMIT_EXCEEDED
Moveworks has exceeded the allowable number of requests per minute.
If your gateway enforces a rate limit, advertise it via response headers on every response. Moveworks reads these headers and proactively slows down its call rate when your remaining capacity drops below ~30% of your limit, without waiting for a 429:
Common header-name variants (X-Rate-Limit-*, RFC 9456 RateLimit-*) are also recognized. If you do not enforce a rate limit on your side, omit these headers entirely; Moveworks falls back to its baseline crawl pacing.
For the full throttling story (proactive vs reactive behavior, what Moveworks does with each header, capacity planning), see the Operational Guide.
500 INTERNAL_SERVER_ERROR
Something went wrong in the gateway and threw an exception.
502 EXTERNAL_REST_ERROR
Something went wrong between the gateway and your system. Should include the raw response from the source system’s error.