Home/API/HTTP Headers
API Cheat Sheet Wiki

HTTP Headers cheat sheet

Common request and response headers for caching, auth, content negotiation, and tracing.

Quick lookup

AuthorizationCarries bearer tokens or credentials. Never log full values.
Content-TypeCheck exact spelling, casing, and the platform documentation for this field.
AcceptCheck exact spelling, casing, and the platform documentation for this field.
Cache-ControlCheck exact spelling, casing, and the platform documentation for this field.
ETagCheck exact spelling, casing, and the platform documentation for this field.
If-None-MatchCheck exact spelling, casing, and the platform documentation for this field.
LocationCheck exact spelling, casing, and the platform documentation for this field.
Retry-AfterTells the client how long to wait before retrying.
X-Request-IDCheck exact spelling, casing, and the platform documentation for this field.

Common mistakes

  • Debugging the client before checking the raw request and response
  • Ignoring headers that explain cache, auth, or rate limits
  • Treating browser CORS failures as generic API downtime
  • Logging tokens or webhook secrets while troubleshooting

Online tools