The visit after the update.

The request is invalid. Branch on errorCode, not message. Body validation failures carry errorCode unknown; metadata and status rule violations carry a specific errorCode: visits.visit.invalid-metadata or visits.visit.invalid-status-transition.

The request carries no usable API token. Send the token in the x-api-token header exactly as it was issued to you. Branch on errorCode: public-api-access.api-token.not-provided when the header is missing or empty, public-api-access.api-token.invalid when the token is malformed or not recognised, and public-api-access.api-token.revoked when the token was withdrawn by Stowlog. A revoked token never starts working again — ask for a new one rather than retrying. Rejected requests do not count towards your monthly quota.

The visit does not exist, belongs to another facility or has been deleted (errorCode: visits.visit.not-found). Branch on errorCode, not message.

Your API token has used its monthly request quota. The quota is set by the plan attached to the token and counts every authenticated request, whatever its outcome, including requests that then fail validation. It is measured per calendar month in UTC and starts again at 00:00 UTC on the first day of the next month. Requests rejected with 429 do not count. The response carries no Retry-After header.