HTTP Status Code Lookup

Client-sideNo sign-upFree

Look up any HTTP status code's meaning, or browse/search the full reference table by category.

How this tool works

1

Search or browse

Type a code, name, or keyword, or filter by category (2xx/3xx/4xx/5xx).

2

See the exact meaning

A plain-language explanation of what the code means and when it's actually used.

3

Check commonality

Each code is tagged common, occasional, or rare so you know if it's expected or unusual.

4

Scan the full reference table

Every code stays visible below the search, filterable and searchable together.

Quick facts

Category
Text Tools
Best for
Understanding an unfamiliar status code in an API response, or choosing the right one to return
29 status codes
200
OK
The request succeeded. The most common success response for GET requests.
common
201
Created
The request succeeded and a new resource was created, typically in response to a POST.
common
202
Accepted
The request was accepted for processing, but processing isn't complete yet.
occasional
204
No Content
The request succeeded but there's no response body to return, common after a DELETE.
common
206
Partial Content
Returns only part of a resource, used for byte-range requests like resumable downloads or video streaming.
occasional
301
Moved Permanently
The resource has permanently moved to a new URL; clients should update their links.
common
302
Found
The resource temporarily lives at a different URL; the original URL should still be used for future requests.
common
304
Not Modified
The cached version of the resource is still valid, so no body is sent - saves bandwidth.
common
307
Temporary Redirect
Like 302, but strictly preserves the original request method (a POST stays a POST).
occasional
308
Permanent Redirect
Like 301, but strictly preserves the original request method.
occasional
400
Bad Request
The server couldn't understand the request due to malformed syntax or invalid data.
common
401
Unauthorized
Authentication is required and either missing or invalid - despite the name, this is about authentication, not authorization.
common
403
Forbidden
The server understood the request but refuses to authorize it, regardless of authentication.
common
404
Not Found
The server can't find the requested resource. The most widely recognized status code.
common
405
Method Not Allowed
The HTTP method used isn't supported for this resource (e.g. POST to a read-only endpoint).
occasional
408
Request Timeout
The server timed out waiting for the request from the client.
rare
409
Conflict
The request conflicts with the current state of the resource, such as an edit conflict.
occasional
410
Gone
The resource is permanently gone and no forwarding address is known - stronger than 404.
rare
413
Payload Too Large
The request body exceeds the server's size limit.
occasional
415
Unsupported Media Type
The request body's format isn't supported by the server for this endpoint.
occasional
418
I'm a Teapot
An April Fools' joke from RFC 2324, occasionally implemented for fun rather than genuine use.
rare
422
Unprocessable Entity
The request is well-formed but contains semantic errors, common in API validation responses.
common
429
Too Many Requests
The client has sent too many requests in a given time window - rate limiting.
common
500
Internal Server Error
A generic catch-all for an unexpected server-side failure.
common
501
Not Implemented
The server doesn't support the functionality required to fulfill the request.
rare
502
Bad Gateway
A server acting as a gateway or proxy received an invalid response from an upstream server.
common
503
Service Unavailable
The server is temporarily unable to handle the request, often due to overload or maintenance.
common
504
Gateway Timeout
A gateway or proxy didn't get a timely response from an upstream server.
common
511
Network Authentication Required
The client needs to authenticate to gain network access, common on captive portals (like hotel WiFi).
rare
In-content slot

About this tool

Enter a status code like 404 or 503 to see its exact meaning, a plain-language explanation of when it's actually used, and whether it's something you'll commonly run into or a rare/obscure one you might not recognize - or skip the search entirely and browse the full reference table, filterable by category (2xx success, 3xx redirection, 4xx client error, 5xx server error) and searchable by code, name, or keyword. Beyond the well-known ones like 200, 404, and 500, this covers the codes that come up constantly in API and web development but are easy to mix up - the difference between 301 and 308 redirects, why 401 is about authentication while 403 is about authorization, or what 429 rate limiting actually signals to a client. Each entry is tagged by how commonly you'd actually encounter it in practice, so a genuinely obscure code like 511 isn't presented with the same weight as something you'll see in server logs every day. Useful for quickly understanding an unfamiliar status code in an API response, choosing the right code to return from your own API, or double-checking the difference between two similar-sounding codes. Runs entirely client-side against a static reference table - no live requests are made.

Why use this tool

Search and browse together

Look up a specific code instantly, or explore the full table by category without leaving the search.

Explains commonly confused pairs

Covers distinctions like 401 vs 403 or 301 vs 308 that are easy to mix up.

Commonality tagging

Flags whether a code is one you'll see constantly or a rare edge case, not just its definition.

Full category coverage

2xx success, 3xx redirection, 4xx client error, and 5xx server error codes all included.

Frequently asked questions

401 Unauthorized means authentication is missing or invalid - despite the name, it's specifically about who you are, and the correct response is to authenticate (e.g. log in). 403 Forbidden means the server knows who you are but you're not allowed to access this resource regardless - the correct response is that no amount of re-authenticating as the same user will help, since it's a permissions issue rather than an identity one.

They differ along two independent axes: permanence (301/308 signal a permanent move that clients should remember; 302/307 signal a temporary one) and method preservation (307/308 strictly preserve the original HTTP method, like keeping a POST as a POST, while 301/302 have historically been inconsistently reinterpreted by clients as allowing a method change to GET). 308 and 307 were introduced specifically to remove that ambiguity for cases where preserving the method matters.

It's based on how often a status code actually shows up in typical web and API development - codes like 200, 404, and 500 appear constantly in day-to-day work and logs, while codes like 511 or 418 are technically valid and occasionally implemented but rarely encountered outside specific niche situations. This is a practical, not formal, distinction meant to help you gauge whether an unfamiliar code you've encountered is expected or genuinely unusual.

Explore more free tools

Formatters, converters, validators, and generators - all free and running entirely in your browser.

Browse more tools