Skip to main content
Errors use an HTTP status code and a JSON body.
Log the HTTP status, request id if present, endpoint, and sanitized request metadata. Do not log API keys, tokens, full card data, or customer secrets.