​
API Conventions

Prove Platform APIs follow consistent API conventions. The API responses follow these conventions:

  • Optional fields that have no values aren’t returned.

  • JSON maps that have no values aren’t returned.

  • JSON arrays that have no values aren’t returned.

​
HTTP Status Codes

The following table has a list of the HTTP status codes returned by the Prove services:

CodeDefinitionDescription
200OKThe request completed successfully.
400Bad RequestThere was a problem with the submitted request.
401UnauthorizedThe request lacks valid authentication credentials for the target resource.
403ForbiddenThe client does not have permission to access the target resource.
404Not FoundThe server did not find anything matching the Request-URI.
500Internal Server ErrorThe server encountered an unexpected condition preventing it from fulfilling the request. Retry the request, and if the problem persists, contact Prove support.

​
API Error Codes

When a Prove API encounters a request error, the JSON response object includes a code field and a message field to give further context.

This table has a list of the API error codes:

Error CodeDescriptionResolution Path
8000Internal ErrorThe server encountered an unexpected condition preventing it from fulfilling the request. Retry the request, and if the problem persists, contact Prove support.
8001Malformed RequestEnsure the request is valid JSON, is under 4 KB in size, and correct any invalid parameters. Invalid parameters are specified with the reason in the message field.
8002Unauthorized RequestThe request lacks valid authentication credentials for the target resource - ensure the correct credentials were used.
8003Step Called Out of OrderThe request called an endpoint out of order. Check the next field for the proper endpoint to call.
8007Sandbox User Not FoundEnsure only test user information is used as input for requests unless otherwise specified in the test cases.
8008Invalid Correlation IDEnsure the correct Correlation ID is used as input for all endpoints other than Start. The Correlation ID is unique per user/session and cannot be used across transactions.
8009Sandbox Test User Access DeniedThe test user cannot be accessed with your current product credentials. Ensure you’re using test users with the matching Prove solution credentials.
8010Unauthorized for CountryThis can mean one of two things:
  • The customer is not authorized to verify numbers for the requested country. Contact your Prove representative.
  • An EU number is being passed to our US endpoint, or vice versa. Use the correct endpoint for the given phone number.

​
Retry Behavior After Errors

When an HTTP status code other than 200 returns, you can fix and retry the request. If you retry a request that resulted in 200, you will receive an HTTP 403 code with either:

  • step called out of order
  • correlation ID is expired or invalid Prove prevents retries to ensure proper behavior and mitigate issues with replay attacks.