> ## Documentation Index > Fetch the complete documentation index at: https://docs.iotools.cloud/llms.txt > Use this file to discover all available pages before exploring further. # HTTP Header Analyzer > Paste raw HTTP request or response headers and get them parsed, categorized (security, caching, CORS, content) and explained one by one, plus a JSON export — all in your browser. [Try HTTP Header Analyzer in your browser →](https://iotools.cloud/tool/http-header-analyzer/) ## OpenAPI ````yaml https://api.iotools.cloud/v1/openapi post /v1/tool/http-header-analyzer openapi: 3.1.0 info: title: iotools.cloud API version: 1.0.0 description: >- Run any iotools.cloud tool over HTTP. Authenticate with `Authorization: Bearer iot_live_…`. **Only `POST /v1/tool/{slug}` costs credits.** Every GET here — the catalog, a tool's schema, your balance — is free. A tool call is charged its own weight or your plan's per-call minimum, whichever is larger; `x-iotools-credit-cost` on each operation is quoted at the free-tier minimum, and `GET /v1/tools/list` returns the exact figure for your key. `GET /v1/me/credits` reports what you have left, and `GET /v1/me/usage` reports what it went on. Failures are RFC 9457 problem documents — branch on `code`. servers: - url: https://api.iotools.cloud description: Production security: - bearerAuth: [] tags: - name: Catalog description: Find a tool and read its contract. Free. - name: Converters description: >- Convert between formats, encodings, and units — Base64, CSV and JSON, timestamps, and more. Fast, free, and processed right in your browser. - name: Formatters description: >- Format, beautify, minify, and validate code and data — JSON, HTML, CSS, SQL, and regex. Clean up messy input in one click, with nothing to upload. - name: Generators description: >- Generate exactly what you need and on demand — passwords, UUIDs, QR codes, hashes, random numbers, and more. Secure, instant, and free. - name: Calculators description: >- Crunch the numbers fast — from everyday math to specialized conversions and unit work. Free online calculators that run entirely in your browser. - name: Editors description: >- Edit and transform text, code, and images with quick, focused editors that run entirely in your browser — nothing to install, and no sign-up needed. - name: Utilities description: >- Everyday developer and web utilities — DNS and IP lookups, redirect and certificate checkers, and other quick diagnostics. Free and privacy-friendly. - name: Account description: Your key's allowance, limits and usage history. paths: /v1/tool/http-header-analyzer: post: tags: - Utilities summary: HTTP Header Analyzer description: >- Paste raw HTTP request or response headers and get them parsed, categorized (security, caching, CORS, content) and explained one by one, plus a JSON export — all in your browser. [Try HTTP Header Analyzer in your browser →](https://iotools.cloud/tool/http-header-analyzer/) operationId: run_http_header_analyzer requestBody: required: false content: application/json: schema: type: object properties: headersInput: type: string description: HTTP Headers required: [] examples: typical_html_response: summary: Typical HTML response value: headersInput: >- HTTP/1.1 200 OK Date: Fri, 20 Mar 2026 08:15:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 24580 Content-Encoding: gzip Cache-Control: max-age=3600, public ETag: "5f3b8c2d-6004" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Server: nginx/1.24.0 X-Powered-By: Express Set-Cookie: sessionId=abc123; Path=/; HttpOnly Set-Cookie: theme=dark; Path=/ api_json_response_with_cors: summary: API JSON response with CORS value: headersInput: >- HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Content-Length: 1482 Cache-Control: no-store Access-Control-Allow-Origin: https://app.example.com Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none' X-Request-Id: req_abc123 responses: '200': description: Tool output content: application/json: examples: typical_html_response: summary: Typical HTML response value: tool: http-header-analyzer tool_version: 1.0.1 outputs: summary: - metric: Status Line value: HTTP/1.1 200 OK - metric: Total Headers value: '14' - metric: Security Headers value: '4' - metric: Caching Headers value: '3' - metric: CORS Headers value: '0' - metric: Content Headers value: '3' - metric: Custom / Non-standard Headers value: '4' - metric: Missing Common Security Headers value: Content-Security-Policy, Permissions-Policy headers: - header: Date category: Custom value: Fri, 20 Mar 2026 08:15:30 GMT description: Custom or non-standard header. - header: Content-Type category: Content value: text/html; charset=UTF-8 description: >- The MIME type of the response body and its character encoding. - header: Content-Length category: Content value: '24580' description: The size of the response body, in bytes. - header: Content-Encoding category: Content value: gzip description: >- The compression algorithm applied to the response body. - header: Cache-Control category: Caching value: max-age=3600, public description: >- Directives controlling how, where, and for how long the response may be cached. - header: ETag category: Caching value: '"5f3b8c2d-6004"' description: >- A version identifier for the resource, used for conditional requests. - header: Vary category: Caching value: Accept-Encoding description: >- Lists request headers that affect which cached response variant is served. - header: Strict-Transport-Security category: Security value: max-age=31536000; includeSubDomains description: >- Forces HTTPS connections, preventing protocol downgrade and cookie hijacking. - header: X-Content-Type-Options category: Security value: nosniff description: >- Prevents MIME-type sniffing so the browser respects the declared Content-Type. - header: X-Frame-Options category: Security value: SAMEORIGIN description: >- Controls whether the page can be rendered in a frame or iframe (clickjacking protection). - header: Referrer-Policy category: Security value: strict-origin-when-cross-origin description: >- Controls how much referrer information is sent with outgoing requests. - header: Server category: Custom value: nginx/1.24.0 description: Custom or non-standard header. - header: X-Powered-By category: Custom value: Express description: Custom or non-standard header. - header: Set-Cookie category: Custom value: >- sessionId=abc123; Path=/; HttpOnly, theme=dark; Path=/ description: Custom or non-standard header. jsonOutput: |- { "statusLine": "HTTP/1.1 200 OK", "headers": [ { "name": "Date", "values": [ "Fri, 20 Mar 2026 08:15:30 GMT" ] }, { "name": "Content-Type", "values": [ "text/html; charset=UTF-8" ] }, { "name": "Content-Length", "values": [ "24580" ] }, { "name": "Content-Encoding", "values": [ "gzip" ] }, { "name": "Cache-Control", "values": [ "max-age=3600, public" ] }, { "name": "ETag", "values": [ "\"5f3b8c2d-6004\"" ] }, { "name": "Vary", "values": [ "Accept-Encoding" ] }, { "name": "Strict-Transport-Security", "values": [ "max-age=31536000; includeSubDomains" ] }, { "name": "X-Content-Type-Options", "values": [ "nosniff" ] }, { "name": "X-Frame-Options", "values": [ "SAMEORIGIN" ] }, { "name": "Referrer-Policy", "values": [ "strict-origin-when-cross-origin" ] }, { "name": "Server", "values": [ "nginx/1.24.0" ] }, { "name": "X-Powered-By", "values": [ "Express" ] }, { "name": "Set-Cookie", "values": [ "sessionId=abc123; Path=/; HttpOnly", "theme=dark; Path=/" ] } ], "analysis": [ { "name": "Date", "category": "custom", "standard": false, "description": "Custom or non-standard header." }, { "name": "Content-Type", "category": "content", "standard": true, "description": "The MIME type of the response body and its character encoding." }, { "name": "Content-Length", "category": "content", "standard": true, "description": "The size of the response body, in bytes." }, { "name": "Content-Encoding", "category": "content", "standard": true, "description": "The compression algorithm applied to the response body." }, { "name": "Cache-Control", "category": "caching", "standard": true, "description": "Directives controlling how, where, and for how long the response may be cached." }, { "name": "ETag", "category": "caching", "standard": true, "description": "A version identifier for the resource, used for conditional requests." }, { "name": "Vary", "category": "caching", "standard": true, "description": "Lists request headers that affect which cached response variant is served." }, { "name": "Strict-Transport-Security", "category": "security", "standard": true, "description": "Forces HTTPS connections, preventing protocol downgrade and cookie hijacking." }, { "name": "X-Content-Type-Options", "category": "security", "standard": true, "description": "Prevents MIME-type sniffing so the browser respects the declared Content-Type." }, { "name": "X-Frame-Options", "category": "security", "standard": true, "description": "Controls whether the page can be rendered in a frame or iframe (clickjacking protection)." }, { "name": "Referrer-Policy", "category": "security", "standard": true, "description": "Controls how much referrer information is sent with outgoing requests." }, { "name": "Server", "category": "custom", "standard": false, "description": "Custom or non-standard header." }, { "name": "X-Powered-By", "category": "custom", "standard": false, "description": "Custom or non-standard header." }, { "name": "Set-Cookie", "category": "custom", "standard": false, "description": "Custom or non-standard header." } ], "summary": { "totalHeaders": 14, "categories": { "security": 4, "caching": 3, "cors": 0, "content": 3, "custom": 4 }, "missingSecurityHeaders": [ "Content-Security-Policy", "Permissions-Policy" ] } } credits_used: 3 credits_remaining: null api_json_response_with_cors: summary: API JSON response with CORS value: tool: http-header-analyzer tool_version: 1.0.1 outputs: summary: - metric: Status Line value: HTTP/1.1 200 OK - metric: Total Headers value: '10' - metric: Security Headers value: '3' - metric: Caching Headers value: '1' - metric: CORS Headers value: '3' - metric: Content Headers value: '2' - metric: Custom / Non-standard Headers value: '1' - metric: Missing Common Security Headers value: X-Frame-Options, Referrer-Policy, Permissions-Policy headers: - header: Content-Type category: Content value: application/json; charset=UTF-8 description: >- The MIME type of the response body and its character encoding. - header: Content-Length category: Content value: '1482' description: The size of the response body, in bytes. - header: Cache-Control category: Caching value: no-store description: >- Directives controlling how, where, and for how long the response may be cached. - header: Access-Control-Allow-Origin category: CORS value: https://app.example.com description: >- Specifies which origin(s) are allowed to read the response. - header: Access-Control-Allow-Methods category: CORS value: GET, POST, PUT, DELETE, OPTIONS description: >- Specifies which HTTP methods are allowed for cross-origin requests. - header: Access-Control-Allow-Credentials category: CORS value: 'true' description: >- Indicates whether the response may be shared with credentialed requests. - header: Strict-Transport-Security category: Security value: max-age=31536000; includeSubDomains; preload description: >- Forces HTTPS connections, preventing protocol downgrade and cookie hijacking. - header: X-Content-Type-Options category: Security value: nosniff description: >- Prevents MIME-type sniffing so the browser respects the declared Content-Type. - header: Content-Security-Policy category: Security value: default-src 'none' description: >- Controls which resources the browser may load, mitigating XSS and data-injection attacks. - header: X-Request-Id category: Custom value: req_abc123 description: Custom or non-standard header. jsonOutput: |- { "statusLine": "HTTP/1.1 200 OK", "headers": [ { "name": "Content-Type", "values": [ "application/json; charset=UTF-8" ] }, { "name": "Content-Length", "values": [ "1482" ] }, { "name": "Cache-Control", "values": [ "no-store" ] }, { "name": "Access-Control-Allow-Origin", "values": [ "https://app.example.com" ] }, { "name": "Access-Control-Allow-Methods", "values": [ "GET, POST, PUT, DELETE, OPTIONS" ] }, { "name": "Access-Control-Allow-Credentials", "values": [ "true" ] }, { "name": "Strict-Transport-Security", "values": [ "max-age=31536000; includeSubDomains; preload" ] }, { "name": "X-Content-Type-Options", "values": [ "nosniff" ] }, { "name": "Content-Security-Policy", "values": [ "default-src 'none'" ] }, { "name": "X-Request-Id", "values": [ "req_abc123" ] } ], "analysis": [ { "name": "Content-Type", "category": "content", "standard": true, "description": "The MIME type of the response body and its character encoding." }, { "name": "Content-Length", "category": "content", "standard": true, "description": "The size of the response body, in bytes." }, { "name": "Cache-Control", "category": "caching", "standard": true, "description": "Directives controlling how, where, and for how long the response may be cached." }, { "name": "Access-Control-Allow-Origin", "category": "cors", "standard": true, "description": "Specifies which origin(s) are allowed to read the response." }, { "name": "Access-Control-Allow-Methods", "category": "cors", "standard": true, "description": "Specifies which HTTP methods are allowed for cross-origin requests." }, { "name": "Access-Control-Allow-Credentials", "category": "cors", "standard": true, "description": "Indicates whether the response may be shared with credentialed requests." }, { "name": "Strict-Transport-Security", "category": "security", "standard": true, "description": "Forces HTTPS connections, preventing protocol downgrade and cookie hijacking." }, { "name": "X-Content-Type-Options", "category": "security", "standard": true, "description": "Prevents MIME-type sniffing so the browser respects the declared Content-Type." }, { "name": "Content-Security-Policy", "category": "security", "standard": true, "description": "Controls which resources the browser may load, mitigating XSS and data-injection attacks." }, { "name": "X-Request-Id", "category": "custom", "standard": false, "description": "Custom or non-standard header." } ], "summary": { "totalHeaders": 10, "categories": { "security": 3, "caching": 1, "cors": 3, "content": 2, "custom": 1 }, "missingSecurityHeaders": [ "X-Frame-Options", "Referrer-Policy", "Permissions-Policy" ] } } credits_used: 3 credits_remaining: null schema: type: object required: - tool - tool_version - outputs - credits_used - credits_remaining properties: outputs: type: object properties: summary: type: array items: type: object properties: metric: type: string description: Metric value: type: string description: Value x-iotools-columns: - metric - value headers: type: array items: type: object properties: header: type: string description: Header category: type: string description: Category value: type: string description: Value description: type: string description: Description x-iotools-columns: - header - category - value - description jsonOutput: type: string description: JSON tool: type: string description: The tool's slug, echoing the {slug} in the request path. tool_version: type: string description: Output-contract version for this tool. credits_used: type: integer description: >- Credits this call consumed, after any settlement refund. 0 when metering is disabled. credits_remaining: type: - integer - 'null' description: >- Credits left in the current monthly allowance, or null when metering is disabled. request_id: type: string description: Correlation id, also sent as x-request-id. '400': $ref: '#/components/responses/ValidationError' '401': $ref: '#/components/responses/Unauthorized' '402': $ref: '#/components/responses/InsufficientCredits' '403': $ref: '#/components/responses/ToolNotAllowed' '404': $ref: '#/components/responses/ToolNotFound' '413': $ref: '#/components/responses/PayloadTooLarge' '429': $ref: '#/components/responses/RateLimited' '500': $ref: '#/components/responses/ToolFailed' '503': $ref: '#/components/responses/ToolDisabled' security: - bearerAuth: [] components: responses: ValidationError: description: Invalid request. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/validation_error title: type: string description: Short human-readable summary of the failure. examples: - Invalid request status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - validation_error detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. fields: type: - object - string additionalProperties: type: string description: >- What failed: a map of field name → message. Absent when the body itself is malformed; a single string when the failure isn't tied to one field. example: type: https://iotools.cloud/docs/errors/validation_error title: Invalid request status: 400 code: validation_error detail: One or more inputs are invalid — see `fields`. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 fields: inputString: Required Unauthorized: description: Missing or invalid API key. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/invalid_api_key title: type: string description: Short human-readable summary of the failure. examples: - Invalid API key status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - invalid_api_key detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. example: type: https://iotools.cloud/docs/errors/invalid_api_key title: Invalid API key status: 401 code: invalid_api_key detail: 'Provide ''Authorization: Bearer ''.' request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 InsufficientCredits: description: Monthly credit allowance exhausted. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/insufficient_credits title: type: string description: Short human-readable summary of the failure. examples: - Insufficient credits status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - insufficient_credits detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. credits_used: type: integer description: Always 0 — a refused call charges nothing. credits_remaining: type: integer description: Credits left in the allowance — fewer than this call costs. example: type: https://iotools.cloud/docs/errors/insufficient_credits title: Insufficient credits status: 402 code: insufficient_credits detail: This call costs 1 credit and 0 remain in this month's allowance. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 credits_used: 0 credits_remaining: 0 ToolNotAllowed: description: Tool exists but has no API surface. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/tool_not_allowed title: type: string description: Short human-readable summary of the failure. examples: - Tool not available over the API status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - tool_not_allowed detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. example: type: https://iotools.cloud/docs/errors/tool_not_allowed title: Tool not available over the API status: 403 code: tool_not_allowed detail: >- "Background Remover" is available on iotools.cloud but has no API endpoint. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 ToolNotFound: description: No such tool. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/tool_not_found title: type: string description: Short human-readable summary of the failure. examples: - Tool not found status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - tool_not_found detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. example: type: https://iotools.cloud/docs/errors/tool_not_found title: Tool not found status: 404 code: tool_not_found detail: No tool with that slug. See GET /v1/tools/list. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 PayloadTooLarge: description: Body too large. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/payload_too_large title: type: string description: Short human-readable summary of the failure. examples: - Payload too large status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - payload_too_large detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. example: type: https://iotools.cloud/docs/errors/payload_too_large title: Payload too large status: 413 code: payload_too_large detail: Request body exceeds this tool's size limit. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 RateLimited: description: Per-minute rate limit exceeded. headers: Retry-After: description: Seconds to wait before retrying (RFC 9110 delta-seconds). schema: type: integer content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/rate_limited title: type: string description: Short human-readable summary of the failure. examples: - Rate limit exceeded status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - rate_limited detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. retry_after: type: integer description: >- Seconds until the window resets — the same value as the `Retry-After` header. example: type: https://iotools.cloud/docs/errors/rate_limited title: Rate limit exceeded status: 429 code: rate_limited detail: Too many requests. Retry in 30s. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 retry_after: 30 ToolFailed: description: Tool failed to run. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/processing_error - https://iotools.cloud/docs/errors/internal_error title: type: string description: Short human-readable summary of the failure. examples: - Tool failed to run - Internal error status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - processing_error - internal_error detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. credits_used: type: integer description: >- Always 0 on `processing_error` — a failed run is refunded, floor included. credits_remaining: type: integer description: >- Credits left after the refund. Absent when metering is disabled. example: type: https://iotools.cloud/docs/errors/processing_error title: Tool failed to run status: 500 code: processing_error detail: The tool failed to run. Please try again. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 credits_used: 0 ToolDisabled: description: Tool temporarily disabled. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/tool_disabled - https://iotools.cloud/docs/errors/api_unconfigured title: type: string description: Short human-readable summary of the failure. examples: - Tool temporarily disabled - API not configured status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - tool_disabled - api_unconfigured detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. example: type: https://iotools.cloud/docs/errors/tool_disabled title: Tool temporarily disabled status: 503 code: tool_disabled detail: This tool is temporarily unavailable. Try again shortly. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: iot_live_… ````