What does HTTP 428 mean from this API

It is a challenge. The body explains it; retry with the X-Challenge header set as instructed.

Run it

curl -s -i https://api.model.tools/api/v1/inbox/a1/latest_otp | head -1

Response

HTTP/2 200