This page lists the error messages and codes that people and integrations meet most often, grouped by where they appear, with the meaning and the fix. Messages are quoted as Hermetry shows them. Codes in code font are stable and safe to use in your own error handling; sentences may change. For an error not listed here, search the section of the feature, or see Getting help .
Plan limits
A plan limit answers 403 with details.key naming the limit, details.limit its value and details.current your count.
details.key or messageLimit Fix max_devices, “The device limit of this account is reached.”Devices (43, 77 or 403 by tier) Delete unused devices (sample devices, quarantined ones) or change the plan “Your plan allows n flows: m in use, and this deploy adds k .” Flows or script blocks Delete or merge flows; see Flow limits “Your plan allows {limit} cameras with live view, and {current} of {limit} are used.” Cameras with live view (12) Turn live view off on a camera you do not watch Camera minutes used up Monthly camera minutes (10,000) Wait for the next month, or a usage pack “This month’s panel data allowance is used up.” Router panel data (10 GiB a month) Wait for the next month key_limit (in a flow’s run)Telemetry keys (250, 400 or 2,050) Drop keys you do not need before Save telemetry FEATURE_NOT_AVAILABLEYour plan does not include the feature See My Modules
The monthly IoT message allowance never produces an error: devices keep sending past it. See Limits and quotas .
REST API
Status and code Meaning Fix 400 VALIDATION_ERROR, “Validation error” with issuesA field breaks a rule Read issues[].path and message 400 “Malformed request body”The body is not valid JSON Fix the JSON 401 UNAUTHORIZED, “Invalid or expired API key.”A typo, an expired or revoked key, or another organisation’s key Check the key and the tenantId in the path 403 “API key does not have the required permission.”The key lacks the route’s permission Edit the key’s Module permissions 403 “You are not permitted to perform this action”The key’s holder no longer has the permission Check the holder’s role, groups and access policies 403 “This API key may not be used from the current IP address.”The key’s or the organisation’s IP allowlist Call from an allowed network 403 TENANT_IP_NOT_ALLOWEDThe organisation’s IP access lists refuse the address Use an allowed network 403 TENANT_SUSPENDED, TENANT_INACTIVEThe organisation is not active Ask an owner 404 NOT_FOUNDNot found, or not visible to you Check the id and permissions 409 CONFLICTA duplicate, a record in use, a state that forbids the action, or a concurrent change Read again, then decide 412, 428If-Match is stale or missingRead again and resend with the new version 413Body or file too large Send less 429 RATE_LIMIT_EXCEEDED, “Too many requests. Please try again later.”The per-address limit (120 a minute) Wait Retry-After 429 “API key rate limit exceeded. Please slow down.”The per-key limit (1,000 a minute by default) Spread the calls 429 “Your plan’s API rate limit has been reached…”The organisation’s plan limit Spread the calls or change the plan 503 TENANT_READ_ONLY, “This workspace is read-only while it is being moved. Please try again later.”The organisation is being moved Retry after Retry-After (300 s); reads work
See Errors and rate limits .
Device logins and messages
Code Meaning Fix CONNACK 1 MQTT version not supported Use MQTT 3.1.1 CONNACK 2 Client ID rejected 1 to 64 characters from A–Z a–z 0–9 . _ : - CONNACK 3 Server unavailable, or the address is briefly blocked after failed logins Back off with jitter; fix the device with wrong credentials CONNACK 4 Bad username or password Check or rotate the credential CONNACK 5 Not authorised; the reason is on the device’s Log tab See A device does not connect unknown_reserved_topicPublished to an unknown topic under v1/ Use a documented topic forbidden_topicA downlink topic, a gateway topic from a non-gateway, or provisioning outside a provisioning session Use the right topic for the device tls_required (HTTP 403)A command poll over plain HTTP that the profile does not allow Use HTTPS child_limit, device_limitA gateway child over the gateway’s child limit or the plan’s device limit Raise the profile’s Max children of a gateway , or free devices child_rate_limitedA gateway child over its own rate limits Lower the child’s rate
Stored data
Code Meaning key_invalid, key_too_long, key_reservedThe key breaks a key rule: characters, 64 characters, or a reserved prefix (_, fw_, current_fw_, cfg.) string_too_long, value_too_largeText over 1,024 characters; JSON over 4 KiB; a number that is not finite bad_formNot a form the store reads, or more than 1,000 points in one message bad_tsA time stamp not in epoch milliseconds, too far in the future (10 minutes by default) or older than the settings allow too_oldOlder than your retention class keeps raw data no_valuesNothing in the record could be stored not_a_deviceA Save telemetry in a flow started by a schedule, an inject, an event or a webhook, which is not about a device range_too_large (history API, 400)More than 10,000 buckets in the window
See Data does not arrive .
Commands
Reason Meaning bad_paramsThe parameters do not match the command wait_too_longA synchronous call waits at most 30 s; use wait: false confirm_required, confirm_text_mismatchA high-impact command needs confirm: true, or the typed text is wrong method_refusedFactory reset, pairing, Wi-Fi forget and forgetting the cloud are never sent rpc_method_reservedThe method belongs to another module rpc_not_supported_by_profileThe profile uses only the Legacy topics device_not_activeThe device is disabled or quarantined not_cancellableOnly a queued or sent command can be cancelled device_rate_limited, “Too many commands to this device; try again in a minute.”More than 10 commands a minute to one device
See Commands do not reach the device .
Flows
Code or message Meaning circuit_openA block’s outbound calls kept failing and are paused; it recovers by itself ssrf_blockedThe address is private, not on the endpoint’s allowed hosts, or leaves the base path timeout, memory, blocked (script)The script used more than its CPU time (50 ms by default) or 32 MiB; after three kills in a row it is blocked for 60 seconds script_unavailable, host_busyThe script service is not reachable or busy; retry later queue_fullA block holds too many messages or keys flow_cycleFlows trigger each other in a cycle “These blocks send messages round in a loop that never waits” A cycle without a waiting block in one flow no_recipients, too_many_recipients, members_unavailable, invalid_attachment, notify_failed, limitNotify errors: nobody to tell, more than 20 recipients after roles, members could not be read, a bad attachment, every delivery failed, every channel out of quota
See Troubleshooting flows .
Alarms and rules
Message Fix “A key names a telemetry key: no spaces and not a number.” Put the value in Value , not in Key “Another rule of this profile has this type.” Use a unique type per profile “Between 10 seconds and 7 days.” The offline delay is out of range “A mute may last at most 90 days.” Choose an earlier end “Sunrise and sunset need the place’s location: set it on the place first.” Set latitude and longitude on the asset “At most 20 actions, the ones inside choices included.” Split the Rules-card rule “This device type has no such command.” Add the command to the profile’s catalog
Profiles, assets and boards
Message Fix “Still used by …: move or remove them first.” A profile still used by devices, alarm rules or commands cannot be deleted “make another profile the default first” The default profile cannot be deleted “An asset with child assets cannot be deleted.” Delete or move the children first “That file is not a dashboard package this version understands.” Import a board file exported from a dashboard “Nothing in this package can be imported here.” Install the modules or widgets the board needs first
Sign-in
Message Fix “This account is locked after too many failed sign-ins. Try again later or reset your password.” Wait or reset the password “Too many wrong codes. Please wait a few minutes and try again.” Wait “This organization requires two-step verification. Sign in again and complete it.” Add a passkey and sign in with it “This account is locked for security reasons…” Contact support
See Sign-in problems .
Cameras and router panels
Message or code Fix “The picture was asked for too often. Wait a moment and try again.” More than 24 live-link requests a minute for one camera “Too many cameras are being watched on this installation right now. Try again in a moment.” The installation’s capacity; retry ttl_idle, ttl_hard, lte_cap, no_dial … (panel session Ended because )See Remote access limits and audit
