All errors return JSON with a single error field.

{ "error": "You do not have access to this workspace" }

HTTP status	Meaning
400	Invalid input — malformed UUID, missing/oversized `name`, invalid email, invalid JSON body, or removing the owner. See `error` for details.
401	Missing or invalid authentication (no valid bearer token, or service-key auth without `user_id`)
403	Insufficient role — the acting user lacks access to the workspace, or holds a role below the one the action requires
404	Workspace or member not found
500	Internal server error (e.g. misconfigured backend)

403 vs 404

Access is checked before existence. A caller with no access to a workspace receives 403 — the API does not reveal whether the workspace exists. A 404 only occurs once access has been granted but the target row cannot be found.

Errors