September 14, 2026 · Yunus Emre Vurgun

HTTP Status Codes Cheat Sheet

http · reference · web · api · cheat-sheet

Every HTTP response carries a three-digit status code. The first digit tells you the class: 2xx means success, 3xx redirection, 4xx client error, 5xx server error. This page lists the thirteen codes you will actually encounter, what each one obligates the client to do, and where to fetch the full reference as data.

The codes that matter

CodeNameClassWhat it means
200OKSuccessRequest succeeded.
201CreatedSuccessResource created successfully.
204No ContentSuccessRequest succeeded, no content returned.
301Moved PermanentlyRedirectionResource permanently moved to new URL.
304Not ModifiedRedirectionCached version is still valid.
400Bad RequestClient errorMalformed request syntax.
401UnauthorizedClient errorAuthentication required.
403ForbiddenClient errorServer refuses to authorize.
404Not FoundClient errorResource not found.
429Too Many RequestsClient errorRate limit exceeded.
500Internal Server ErrorServer errorUnexpected server condition.
502Bad GatewayServer errorInvalid response from upstream.
503Service UnavailableServer errorServer temporarily overloaded.

Three distinctions worth memorizing

401 vs 403. 401 means the request lacks valid credentials and might succeed after authentication. 403 means the server understood the credentials and still refuses. Retrying a 403 with the same credentials never helps.

301 vs 304. 301 says the resource moved and the client should use the new URL going forward. 304 says the client's cached copy is still fresh — it is a bandwidth saver, not an error, and carries no body.

429 vs 503. Both say "slow down," but 429 points at the caller's quota while 503 points at the server's capacity. A well-behaved client backs off on both; see Retry-After and backoff for the exact algorithm.

Use it as data, not prose

This table is also a dataset: HTTP Status Codes, complete. Fetch it in one request and your agent can validate status handling against a known list instead of recalling codes from training data:

curl "https://yjtoon.com/api/dataset/http-status-codes-complete?format=toon"

For the surrounding guides — redirects, caching, client and server errors, content negotiation — browse the HTTP Status Codes category. If you are building retry logic, read rate-limit response headers next.