Errors

{
  "error": {
    "code": "invalid_request",
    "message": "…",
    "request_id": "req_…"
  }
}

Provider identities and raw payloads never appear in errors. Unsupported combinations use 422; conflicting idempotency keys use 409.