HTTP ステータスコード一覧
開発
全 HTTP ステータスコードを 5 カテゴリ(情報 1xx、成功 2xx、リダイレクト 3xx、クライアントエラー 4xx、サーバーエラー 5xx)に分けた検索可能なチートシート。コード(404)、名前(Not Found)、説明のキーワード(cache, timeout)で検索可能。各カードに 1 行の意味とコピーボタン付き — コメントやコミットメッセージに貼り付けやすい。
- 100Continue
The initial part of the request has been received and the client should continue sending the rest.
- 101Switching Protocols
The server is switching protocols as requested in the Upgrade header (e.g., to WebSocket).
- 102Processing
The server has received and is processing the request, but no response is available yet (WebDAV).
- 103Early Hints
Used to preload resources while the server prepares the final response.
- 200OK
The request succeeded. The meaning depends on the HTTP method used.
- 201Created
The request succeeded and a new resource was created — typically returned after POST.
- 202Accepted
The request was accepted for processing, but the processing has not been completed.
- 204No Content
The request succeeded but no body is returned — common for PUT or DELETE.
- 205Reset Content
Tells the client to reset the view that sent the request (e.g., clear a form).
- 206Partial Content
Returned when the client used the Range header to request a portion of the resource.
- 207Multi-Status
WebDAV — multiple resources, each with its own status code, returned inside an XML body.
- 301Moved Permanently
The resource has a new permanent URL. Search engines update their index to the new location.
- 302Found
The resource is temporarily at a different URL — client should keep using the original URL for future requests.
- 303See Other
After a POST, redirect the client to GET another resource (PRG pattern).
- 304Not Modified
The cached version is still fresh — the client should use its cache.
- 307Temporary Redirect
Like 302, but the request method must not change on the redirect.
- 308Permanent Redirect
Like 301, but the request method must not change on the redirect.
- 400Bad Request
The server cannot process the request due to a client-side error (malformed syntax, missing required fields).
- 401Unauthorized
Authentication is required and either missing or invalid. The response should include a WWW-Authenticate header.
- 402Payment Required
Reserved for future use — sometimes used by APIs to indicate billing-related failures.
- 403Forbidden
The server understood the request but refuses to authorize it. Authentication will not help.
- 404Not Found
The requested resource does not exist on the server.
- 405Method Not Allowed
The HTTP method is not supported for this resource (e.g., POST to a read-only endpoint).
- 406Not Acceptable
The server cannot return a response matching the Accept headers from the request.
- 407Proxy Authentication Required
Authentication with a proxy is required to access the resource.
- 408Request Timeout
The server did not receive a complete request within its idle timeout.
- 409Conflict
The request conflicts with the current state of the resource (e.g., concurrent edits).
- 410Gone
The resource is permanently gone — stronger than 404; tells caches and search engines to drop it.
- 411Length Required
The request did not specify a Content-Length, which this server requires.
- 412Precondition Failed
A condition in the request headers (e.g., If-Match) was not met.
- 413Payload Too Large
The request body is larger than the server is willing to process.
- 414URI Too Long
The URI is longer than the server is willing to interpret.
- 415Unsupported Media Type
The Content-Type of the request is not supported by the server.
- 416Range Not Satisfiable
The Range header cannot be fulfilled (out of the resource bounds).
- 417Expectation Failed
The Expect header could not be fulfilled by the server.
- 418I'm a teapot
An April Fools joke from RFC 2324 — used as an Easter egg in some APIs.
- 422Unprocessable Entity
The request is syntactically correct but semantically wrong (failed validation). Common in REST APIs.
- 423Locked
WebDAV — the resource is locked.
- 424Failed Dependency
WebDAV — the request failed because a previous request it depended on failed.
- 425Too Early
The server is unwilling to risk processing a request that may be replayed.
- 426Upgrade Required
The client should upgrade to a different protocol (e.g., TLS).
- 428Precondition Required
The server requires the request to be conditional (e.g., If-Match).
- 429Too Many Requests
The client has sent too many requests in a given time — rate limited. Look for Retry-After.
- 431Request Header Fields Too Large
The request headers are too large in total or individually.
- 451Unavailable For Legal Reasons
The resource is blocked due to a legal demand (named after Ray Bradbury's Fahrenheit 451).
- 500Internal Server Error
A generic server error — something failed and the server has no more specific message.
- 501Not Implemented
The server does not support the functionality required to fulfill the request.
- 502Bad Gateway
Acting as a gateway / proxy, the server got an invalid response from an upstream server.
- 503Service Unavailable
The server is temporarily unable to handle requests — overloaded or down for maintenance.
- 504Gateway Timeout
Acting as a gateway / proxy, the server did not get a response from an upstream server in time.
- 505HTTP Version Not Supported
The HTTP version in the request is not supported by the server.
- 507Insufficient Storage
WebDAV — the server cannot store the representation needed to complete the request.
- 508Loop Detected
WebDAV — the server detected an infinite loop while processing the request.
- 511Network Authentication Required
The client must authenticate to gain network access (used by captive portals).
使い方
- 色付きチップでカテゴリをフィルタ。
- 検索欄にコード・名前・説明のキーワードを入力。
- タイトル横のボタンでステータスコードをコピー。
よくある質問
- 1xx コードはなぜ重要?
- エンドユーザのコードからはあまり見えませんが高度な用途で便利 — 100 Continue で大きなアップロード前にサーバ受け入れを確認、103 Early Hints でレスポンス準備中にブラウザがリソースをプリロード可能。
- 301 と 308 の違い?
- 両方とも「恒久的に移動」。301 はリダイレクト時に HTTP メソッド変更を許容(多くは POST → GET)。308 はメソッド維持を強制。API リダイレクトには 308、レガシー Web には 301。
- 422 と 400 はいつ?
- 400 はリクエスト自体が壊れている(不正な JSON、ヘッダ欠如)。422 は構文は正しいが意味が誤り(例:email フィールドに文字列はあるが有効なメールでない)。
- 418 'I'm a teapot' とは?
- RFC 2324(HTCPCP — ハイパーテキストコーヒーポット制御プロトコル)のエイプリルフール。一部 API がイースターエッグや「意図的な未実装」のシグナルとして利用。
関連ツール
JWT デコーダー
JWT のヘッダー・クレーム・有効期限を即座に確認。
UUID ジェネレーター
ランダムなバージョン 4 UUID をまとめて生成し、コピー。
ハッシュ生成 (SHA)
テキストから SHA-1・SHA-256・SHA-384・SHA-512 ハッシュを生成。
URL エンコーダー / デコーダー
URL 用にテキストをパーセントエンコード、または URL をデコード。
Base64 エンコーダー / デコーダー
テキストを Base64 にエンコード、または Base64 をテキストにデコード。
JSON フォーマッター & バリデーター
ブラウザで JSON を整形・並べ替え・圧縮・検証できます。