Response envelope
A successful response setssuccess: true and carries the payload in result (list endpoints also include a pagination object):
Success
success: false and returns one or more errors, each with a stable code and a human-readable message:
Error
code, not the message — messages may change, codes are stable.
Standard errors
These apply across endpoints:| HTTP | code | When it happens | What to do |
|---|---|---|---|
400 | invalid-request | Malformed body or invalid parameters. | Fix the request; don’t retry it unchanged. |
401 | unauthenticated | Missing or expired token. | Refresh the token and retry — see Authentication. |
403 | forbidden | The operation isn’t available to your company setup. | Contact Venly to enable it. |
404 | account-not-found | The resource (or one it references) doesn’t exist. | Check the ID; for transfers, confirm the account is the sender or receiver. |
409 | concurrent-modification | Stale version on an update. | Re-fetch, reapply your change, retry — see Versioning. |
422 | (varies) | Semantically invalid — e.g. unsupported currency pair, or insufficient balance/allowance. | Fix the inputs; check the operation’s own notes. |
500 | internal-error | Unexpected server error. | Retry with backoff; if it persists, contact Venly. |
Verification & activation gates
A new account can’t move money until it’s verified, and a self-custody wallet can’t until its permit confirms. These gates return different codes per operation — treat any of them as “not ready yet” rather than matching a single code:| Operation | HTTP | code |
|---|---|---|
| Create a virtual bank account | 400 | kyc-not-verified |
| Create a pay-in session | 422 | kyc-required |
| Create a payment request | 400 | account-not-active |
| Transfer/payment on an inactive self-custody wallet | 400 | account-wallet-not-active |
Rate limits
The Finance API doesn’t publish fixed numeric rate limits. Build for resilience regardless:- Cache your access token and reuse it until it nears expiry — don’t fetch one per request.
- Back off and retry on
500(and on429, if returned), using exponential backoff with jitter. - Make retries safe with an idempotency key so a replay never double-charges.
If you expect high call volumes, confirm current limits with your Venly contact — they aren’t enumerated in the API contract.
Next steps
API conventions
Idempotency, pagination, and versioning rules.
Account verification
The most common reason an otherwise-correct request is rejected.

