What is a common mistake with idempotency and retries in Web API?

Retrying POST requests without idempotency protection can duplicate business actions. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.