We use standard http error codes in the API.

In addition of the error code there will usually also be a json response of the following format:

{
    "message": "Forbidden",
    "error": "ForbiddenError",
    "statusCode": 403
}