Skip to main content
AllDevToolsHub
Technical Encyclopedia

HTTP Status Codes

A comprehensive, developer-focused guide to every HTTP response code. Understand what they mean, why they happen, and how to debug them.

Informational (5xx)

Success (5xx)

Redirection (5xx)

Client Error (5xx)

400Bad Request

The server cannot or will not process the request due to an error that is perceived to be a client error.

401Unauthorized

The request has not been applied because it lacks valid authentication credentials for the target resource.

402Payment Required

Reserved for future use. Originally intended for digital payment systems but never standardized; today it is used by some APIs to signal that a paid plan, quota top-up, or billing action is required.

403Forbidden

The server understood the request but refuses to authorize it.

404Not Found

The server can not find the requested resource.

405Method Not Allowed

The method received in the request is known by the server but not supported by the target resource.

406Not Acceptable

The server cannot produce a response matching the list of acceptable values defined in the request's `Accept` headers.

407Proxy Authentication Required

The client must first authenticate itself with the proxy server.

408Request Timeout

The server timed out waiting for the request to complete.

409Conflict

The request could not be completed due to a conflict with the current state of the target resource.

410Gone

The resource requested is no longer available and will not be available again.

411Length Required

The server refuses to accept the request without a defined `Content-Length` header.

412Precondition Failed

The server does not meet one of the preconditions that the requester put on the request.

413Payload Too Large

The request entity is larger than the limits defined by the server.

414URI Too Long

The URI requested by the client is longer than the server is willing to interpret.

415Unsupported Media Type

The request entity has a media type which the server or resource does not support.

416Range Not Satisfiable

The range specified by the Range header field cannot be fulfilled.

418I'm a Teapot

Defined as an April Fools' joke in RFC 2324 (HTCPCP). Returned by teapots requested to brew coffee.

422Unprocessable Entity

The request was well-formed but was unable to be followed due to semantic errors.

451Unavailable For Legal Reasons

The user requested a resource that cannot legally be provided, such as content censored by a government.

417Expectation Failed

The expectation indicated by the `Expect` request header cannot be met by the server.

421Misdirected Request

The request was directed at a server that is not able to produce a response.

423Locked

The resource that is being accessed is locked (WebDAV).

424Failed Dependency

The request failed because it depended on another request that failed (WebDAV).

425Too Early

The server is unwilling to risk processing a request that might be replayed.

426Upgrade Required

The server refuses to perform the request using the current protocol but might be willing to do so after the client upgrades to a different protocol.

428Precondition Required

The origin server requires the request to be conditional.

431Request Header Fields Too Large

The server is unwilling to process the request because its header fields are too large.

419Page Expired

Non-standard. Used by Laravel (and some other frameworks) to indicate CSRF token mismatch or session expiration.

420Enhance Your Calm

Non-standard. Originally returned by Twitter's v1 API when a client was being rate limited.

499Client Closed Request

Nginx-specific. The client closed the connection while the server was still processing the request.

429Too Many Requests

The user has sent too many requests in a given amount of time ('rate limiting').

Server Error (5xx)

501Not Implemented

The HTTP method is not supported by the server and cannot be handled.

505HTTP Version Not Supported

The HTTP version used in the request is not supported by the server.

507Insufficient Storage

The server is unable to store the representation needed to complete the request (WebDAV).

508Loop Detected

The server detected an infinite loop while processing the request (WebDAV).

511Network Authentication Required

The client needs to authenticate to gain network access.

506Variant Also Negotiates

The server has an internal configuration error: a chosen variant resource is configured to engage in transparent content negotiation itself.

510Not Extended

Further extensions to the request are required for the server to fulfill it.

521Web Server Is Down

Cloudflare-specific. The origin web server has refused the connection from Cloudflare.

522Connection Timed Out

Cloudflare-specific. Cloudflare could not negotiate a TCP handshake with the origin server.

523Origin Is Unreachable

Cloudflare-specific. Cloudflare could not reach the origin server, often due to DNS or routing problems.

524A Timeout Occurred

Cloudflare-specific. Cloudflare established a TCP connection to the origin server but did not receive a timely HTTP response.

525SSL Handshake Failed

Cloudflare-specific. The SSL/TLS handshake between Cloudflare and the origin server failed.

444No Response

Nginx-specific. The server closed the connection without sending any response.

526Invalid SSL Certificate

Cloudflare-specific. Cloudflare could not validate the SSL certificate on the origin web server.

527Railgun Error

Cloudflare-specific. An error occurred in the Railgun connection between Cloudflare and the origin server.

500Internal Server Error

The server encountered an unexpected condition that prevented it from fulfilling the request.

502Bad Gateway

The server, while acting as a gateway or proxy, received an invalid response from the upstream server.

503Service Unavailable

The server is not ready to handle the request.

504Gateway Timeout

The server, while acting as a gateway or proxy, did not get a response in time from the upstream server.

Master Web Architecture

Understanding HTTP status codes is essential for debugging APIs, optimizing SEO, and building resilient web applications. Explore our detailed guides for each code to level up your engineering skills.

StatelessnessIdempotencyRESTful DesignAPI Security