HTTP 418 I'M A TEAPOT

Reserved. Made famous by the 1998 "I'm a teapot" April Fools RFC 2324; not a real status. 418 belongs to the 4xx client error class and is defined in RFC 9110.

Zero retention: your headers never leave this browser. Verify it yourself in DevTools.

Loading the workbench.

About HTTP 418

What Does HTTP 418 I'm a Teapot Mean?

Reserved. Made famous by the 1998 "I'm a teapot" April Fools RFC 2324; not a real status. The code is registered with IANA and defined in RFC 9110.

Client error: the request has a problem, so it cannot be fulfilled as sent. Every code from 400 to 499 shares that general meaning, so a client that does not recognise 418 must treat it like 400.

When Do You See a 418 Response?

418 began as an April Fools' joke: RFC 2324 (1998) defined the Hyper Text Coffee Pot Control Protocol, where a teapot asked to brew coffee answers I'm a teapot. Developers loved it, and many frameworks and sites still return it as an Easter egg or as a playful way to refuse automated requests. RFC 9110 now lists 418 as reserved and unused, so it can never be given a real meaning that would break that joke.

How Do You Fix a 418?

Do not rely on 418 for real error handling; generic clients treat it as an unspecified 4xx. If a service returns it to block bots, read the body for the actual reason and use an honest User-Agent and a reasonable request rate. Servers that want to reject automated traffic should use a standard code such as 403 or 429, which monitoring tools and client libraries understand.

What Does a 418 Response Look Like?

HTTP/1.1 418 I'm a teapot
Content-Type: text/plain
(reserved in RFC 9110; sent only as a joke)

418 is not cacheable by default: a browser or CDN stores it only when Cache-Control or Expires explicitly allows it.

To inspect a real one without sending it anywhere:

  1. Copy the response headers from your browser Network tab, or from curl -i.
  2. Paste them into the Header decoder to see every header explained.
  3. Check caching in the Cache lane.

Which Status Codes Are Related to 418?

  • 400 Bad Request: The request is malformed: bad syntax, invalid framing, or an unreadable body.
  • 403 Forbidden: The server knows who you are and refuses anyway. Logging in again will not help.
  • 429 Too Many Requests: Rate limited. Retry-After says when to try again.

Browse every code on the HTTP status codes page.

What Other Lanes Are in the Reference Section?

  • HTTP status codes: Every IANA-registered status code, with a page per code.
  • MIME types: File extensions to Content-Type, searchable both ways, plus a Content-Type parser.
  • HTTP methods: GET, POST, PUT, PATCH, DELETE and the rest: safe, idempotent, cacheable.

Elsewhere in 2http: Header decoder, Cookie decoder, Cache-Control decoder, CORS checker, User-agent parser, and all eleven lanes on the 2http home page. Part of the 2suite.io privacy-first ecosystem.

Frequently Asked Questions

Is 418 I am a teapot a real status code?

It is reserved in the IANA registry so that nobody assigns it a serious meaning, but it is not a defined status. Servers that send it are joking or using it informally.

Why do some sites return 418 to my scraper?

A few sites use 418 to refuse automated clients in a light-hearted way. Treat it like a 403 or 429 and check the site's terms and rate limits.

Is HTTP 418 an error?

No. 418 is reserved and unused, so a correct server never sends it; a client that receives it should treat it like a generic 4xx response.

Is a 418 response cacheable by default?

No. Caches store a 418 only when Cache-Control or Expires explicitly allows it.

How Can You Verify That Nothing Leaves This Browser?

You do not have to take our word that your headers stay here. Developer tools show every request a page makes, so you can watch this page work and confirm that nothing is sent. The check takes under a minute.

  1. Open your browser developer tools with F12, or Cmd+Option+I on a Mac, and select the Network tab.
  2. Reload the page and let it finish. You will see the page's own files, its web fonts, and one anonymous page-view request. Nothing has been typed yet, so none of them can contain your headers.
  3. Click the clear icon in the Network tab so that the log is empty.
  4. Paste real headers into any lane and read the result.
  5. Look at the Network tab again. It is still empty. For extra proof, turn on offline mode after the page loads and every lane keeps working.

Only two things can add a line to that log, and neither carries your headers. Submitting the feedback form sends the vote and comment you typed. Typing characters in a script the page has not displayed yet, such as Cyrillic or Greek, can make the browser fetch the matching font file, and that request names only the font.

2http never sends a request on your behalf: the request builder writes code for you to run, and the meta inspector reads source you paste instead of fetching a URL. The production site also sends a Content-Security-Policy header that tells your browser to refuse connections to anywhere except this site and the anonymous analytics endpoint.

Was this helpful?