Which endpoint is throwing that? And what does your outbound request look like (headers and all with secrets omitted)?