HTTP 401 Unauthorized

Authentication is missing or invalid. Despite the name, this is about identity, not permission — the server does not know who you are.

Why you would test it

Test the missing-header case and the invalid-token case separately. They are different bugs and they fail in different places.

Endpoints that return 401

82 endpoints in this playground answer with 401. Every one is free, needs no signup, and can be called from the browser or with curl.

…and 57 more endpoints across the catalog.

Other client error codes

All HTTP status codes · All 37 mock REST APIs · Getting started guide