There’s a distinction between a missing need ID (which might once have been valid, but isn’t now) and something that isn’t a valid ID at all. I think silently returning nothing is counter-productive in the case where the request parameters are clearly wrong.