generated: '2026-09-16'
method: probed
source: anonymous requests to https://api.qualia.com/graphql on 2026-09-16
provider: Qualia
providerId: qualia-title
format: graphql-errors
note: >-
  Qualia publishes no public error reference (the developer hub is gated). The
  codes below are only those the live endpoint returned to unauthenticated
  requests; they are Apollo Server error codes carried in extensions.code. The
  full catalog available to authenticated callers is not public.
envelope:
  shape: '{"errors":[{"message": string, "extensions": {"code": string}}]}'
  content_type: application/json; charset=utf-8
errors:
- code: UNAUTHORIZED
  http_status: 401
  messages:
  - Authorization header is missing
  - Authorization header is not properly formatted
  cause: No Authorization header, or a non-Basic scheme (e.g. Bearer) was sent.
  remediation: Send HTTP Basic credentials issued to your organization.
- code: FORBIDDEN
  http_status: 403
  messages:
  - User is not authenticated
  cause: Basic credentials were supplied but not accepted.
  remediation: Verify the organization credentials and that API access is enabled for it.
- code: BAD_REQUEST
  http_status: 400
  messages:
  - This operation has been blocked as a potential Cross-Site Request Forgery (CSRF)...
  cause: GET or form/text Content-Type request without an Apollo preflight header.
  remediation: POST with Content-Type application/json, or set apollo-require-preflight.