Loading...
Look up any HTTP status code with a searchable, category-filtered reference: what the code means, when servers send it, and what the client is expected to do next. From 200 to 511, including subtle ones like 418 and 451.
Filter by class (1xx information, 2xx success, 3xx redirect, 4xx client error, 5xx server error) to narrow down what you are seeing in logs, browser devtools, or an API integration.
401 Unauthorized actually means "unauthenticated" — no or invalid credentials; the client should authenticate and retry. 403 Forbidden means "authenticated but not allowed" — retrying with the same identity will not help.
400 for malformed requests, 422 for well-formed but semantically invalid input, 409 for conflicts like duplicate resources, 429 for rate limiting. Consistency helps clients write correct retry logic.
Yes — it is the 1998 April Fools' "I'm a teapot" RFC, and some APIs (famously Google's) return it as an easter egg. It is harmless but not for production semantics.
PureKit · http-status · Free online tool — files processed locally in your browser, no upload.