POST responses should have a 401 unauthorized HTTP status code, communicating that consumers do not have access
OpenAPI Response Post 401 Status Code Error
Message: POST Responses Has 401 Status Codes
Policies
Response 4xx
Client error responses are where developer experience lives or dies. Consistent 400, 401, 403, 404, and 429 responses with shared schema references make error handling predictable.