# SAM.gov API errors Most SAM.gov API errors come from four causes: a key past its 90-day rotation, a daily limit reached (HTTP 429), a parameter containing a disallowed character such as & | { } ^ \, or a system account call from an IP address that is not allowlisted.Checked on 2026-11-12.Official source: [open.gsa.gov Entity Management API](https://open.gsa.gov/api/entity-api/) | 429 | Daily limit reached | | --- | --- | | Key rejected | Often the 90-day rotation | | Disallowed characters | & / { } ^ \ | | System accounts | IP allowlist required | ## Fixes | Symptom | Likely cause | Fix | | --- | --- | --- | | 429 Too Many Requests | Daily limit | Wait for reset, get a role, or use a system account | | Key rejected | 90-day rotation | Generate a new key in SAM.gov | | Call works locally, fails in production | IP allowlist | Call from a fixed egress IP | | Fields read "null" | Literal null strings | Normalize strings before parsing | ## Related - [SAM.gov API key](https://samgovapi.io/sam-gov-api-key) - [SAM.gov API rate limits](https://samgovapi.io/sam-gov-api-rate-limits) - [Errors on this API](https://samgovapi.io/docs/errors)Updated 2026-11-12. Sources checked 2026-11-12.Independent. Not affiliated with, endorsed by or sponsored by GSA, SAM.gov or any U.S. government agency. Registering in SAM.gov is free at sam.gov.

---

HTML version: https://samgovapi.io/sam-gov-api-errors . Markdown: https://samgovapi.io/sam-gov-api-errors.md

Independent. Not affiliated with, endorsed by or sponsored by GSA, SAM.gov or any U.S. government agency. Registering in SAM.gov is free at sam.gov.

Get a free API key: https://samgovapi.io/sign-up?ref=ai-claudebot