Developer

HTTP Status Lookup

Search HTTP status codes and names with class-based filters and notes.

Loading interactive tool…

Embed this tool on your site

About this tool

HTTP Status Lookup searches a curated set of 32 commonly used HTTP response codes from the 1xx through 5xx classes. Type a number or part of a status name, or filter by class, and the first match is shown with its class, category and a one-line common-use note; click any code in the Matches list to show it instead. The list includes common codes plus a few extensions such as 102 Processing, 103 Early Hints, 422 Unprocessable Content and 429 Too Many Requests. It is a quick reference rather than an exhaustive registry, and it does not quote RFC text.

Why use it

  • Short, practical notes: Every entry has a one-line common-use note, such as 'Temporary redirect that keeps method/body.' for 307, so you can confirm the meaning at a glance.

  • Search by code or phrase: You rarely remember both the number and the name at once. Search either direction — '503' or 'service unavailable' — and land on the same result.

  • Class-level browsing: During incident triage or API design, browse all 4xx client errors or all 5xx server errors at once with the class filter to quickly identify the right code to return.

  • Focused list: 32 high-frequency codes, including 102 Processing, 103 Early Hints, 422 and 429, keep results short and easy to scan.

  • Number prefix search: Typing 50 lists 500 to 504, and typing 4 lists every 4xx code, which is handy when you only remember the first digits.

  • Fast during incidents: No network request per lookup, no login. When your monitoring dashboard shows a spike in 502s at 2 am, look it up instantly.

How to use

  1. Type a numeric code (e.g. 404) or part of a status name or note (e.g. unauthorized) into the search field.
  2. Results update as you type — the first match appears in the Result box and every match is listed as a button under Matches.
  3. Click any code button under Matches to show that code's class, category and common-use note.
  4. Use the class filter buttons (All, 1xx, 2xx, 3xx, 4xx, 5xx) to browse all codes in a category.
  5. Click Copy result to copy the shown entry (code, name, class, category and common use) to your clipboard.

When it helps

  • Debugging API responses during development when an unfamiliar status code appears in the network panel and the meaning is not immediately obvious.
  • Designing REST or GraphQL API error responses and needing to choose the semantically correct code (e.g. 400 vs 409 vs 422) for a given failure scenario.
  • Writing API documentation and needing the standard reason phrase for each code in a response-code table.
  • Triaging production incidents where logs show unexpected status codes from upstream services, CDNs, or load balancers.
  • Reviewing a pull request that changes error handling and wanting to verify the proposed codes match their intended semantics.
  • Teaching HTTP fundamentals to junior developers or in a team workshop by browsing each status class.

Examples

Search by numeric code

Input
Query: 429
Expected result
429 Too Many Requests
Class: 4xx
Category: Client Error
Common use: Rate limit exceeded; retry after waiting.

Search by phrase

Input
Query: unprocessable
Expected result
422 Unprocessable Content
Class: 4xx
Category: Client Error
Common use: Well-formed request but semantic validation failed.

Browse 3xx class

Input
Filter: 3xx
Expected result
6 matches: 301 Moved Permanently, 302 Found, 303 See Other, 304 Not Modified, 307 Temporary Redirect, 308 Permanent Redirect

Tips

  • For REST APIs, prefer 422 over 400 for field-level validation errors and include a structured error body listing which fields failed — this lets clients display form errors without re-parsing a generic message.
  • Return 503 with a Retry-After header during planned deployments or maintenance windows so monitoring systems and clients back off gracefully instead of flooding logs with errors.
  • Never return 200 with an error payload (a so-called '200 OK with error in body') — it breaks HTTP-layer monitoring, CDN caching, and client error-handling logic.
  • Use 304 Not Modified responses with ETag or Last-Modified to enable conditional GET caching — this dramatically reduces bandwidth for API clients that poll frequently.
  • For security-sensitive endpoints, consider returning 404 instead of 403 when a resource exists but the caller is unauthorized — this avoids leaking information about resource existence to attackers.

Frequently Asked Questions

What is the difference between 400 Bad Request and 422 Unprocessable Entity?
400 means the server cannot parse the request at all — malformed JSON syntax, missing required headers, or invalid encoding. 422 means the syntax is valid but the semantic content fails validation — correct JSON but a field value is out of range or a required business rule is violated. RFC 9110 recommends 400 for syntax failures; RFC 4918 defines 422 for semantic/validation failures.
When should I use 401 versus 403?
401 Unauthorized means authentication is required or the provided credentials are invalid — the client should try again with valid credentials. 403 Forbidden means the server understood the request and the caller is authenticated, but they do not have permission to access the resource. Returning 404 instead of 403 is a common deliberate practice to avoid disclosing resource existence.
What does 301 vs 302 vs 307 vs 308 mean for redirects?
301 and 308 are permanent redirects; 302 and 307 are temporary. The key distinction between the pairs is method preservation: 301/302 historically allowed user agents to downgrade POST to GET on redirect; 307/308 require the original method to be preserved. Use 308 for permanent API endpoint moves where clients must re-POST to the new URL.
What is a 429 status and how should clients handle it?
429 Too Many Requests indicates a rate limit has been hit. Clients should inspect the Retry-After response header (seconds or HTTP date) before retrying. Immediate retry loops on 429 will worsen the situation. Well-behaved clients implement exponential backoff with jitter.
What does 503 Service Unavailable indicate and is it retryable?
503 means the server is temporarily unable to handle the request — typically due to overload or planned maintenance. It is always retryable. The server should include a Retry-After header if the downtime duration is known. Unlike 500, a 503 carries the implication that the condition is temporary.
Is 404 the right code when a resource once existed but has been permanently deleted?
410 Gone is the semantically correct code for a resource that existed and has been intentionally removed with no forwarding address. However, 404 is widely acceptable when you do not want to expose resource history. Use 410 when you want search engines to deindex the URL promptly — Googlebot treats 410 as a stronger removal signal than 404.
What is the 207 Multi-Status code used for?
207 is a WebDAV extension (RFC 4918) for responses that contain multiple independent operation results in the body — for example, a bulk operation where some items succeeded (200) and others failed (404 or 403). It is also used by some REST bulk-write APIs outside the WebDAV context.
Are all HTTP status codes covered, including unofficial ones?
No. The tool lists 32 commonly used codes: 100-103, 200, 201, 202, 204, 206, 301-304, 307, 308, 400, 401, 403, 404, 405, 408, 409, 410, 413, 415, 422, 429 and 500-504. Codes such as 207, 418, 423 or 425 are not included, and a search for them shows 'No status matched your query/filter.'

Explore the category

Glossary

HTTP status code
A three-digit integer returned in the first line of an HTTP response that indicates the result of the request. Codes are grouped into five classes by their first digit: 1xx informational, 2xx success, 3xx redirection, 4xx client error, 5xx server error.
RFC 9110
The 2022 IETF RFC that replaced RFC 7230–7235 as the authoritative specification for HTTP semantics, including the canonical definitions of all standard status codes. Supersedes RFC 7231.
Idempotency
A property of HTTP methods meaning repeated identical requests produce the same server state as a single request. GET, PUT, DELETE, and HEAD are idempotent; POST and PATCH generally are not. Status codes like 409 Conflict are relevant when idempotency invariants are violated.
Retry-After header
An HTTP response header sent with 429 (Too Many Requests) or 503 (Service Unavailable) that tells the client how long to wait before retrying — expressed as a number of seconds or an HTTP-date string.
Content negotiation
The HTTP mechanism where a client advertises acceptable response formats via Accept headers and the server returns 406 Not Acceptable if it cannot satisfy the request. Relevant to API design when returning structured error bodies.
WebDAV
Web Distributed Authoring and Versioning — an extension to HTTP defined in RFC 4918 that adds collaborative editing methods (PROPFIND, LOCK, UNLOCK) and introduces status codes 207, 422, 423, and 424 used in some REST APIs.
A LITTLE HELP. A LOT DONE.
Good tools.
Great flow.

Your shortcut to the everyday. Create, convert, calculate,
and get back to what you love.

✓ Free to use✓ No sign-up✓ 500+ possibilities