What do the various error messages mean in MetaDefender Core Rest API?
This article applies to all MetaDefender Core V4 and V5 releases deployed on Windows or Linux systems.
For users interacting with MetaDefender Core via REST API, it is essential that you familiarize yourself with the meaning of the various coded responses and error messages that the Core might return during the course of your system administration and daily file processing flow.
The tables below cover possible responses to all aspects of the REST interaction process, including:
- authorization
- analysis
- batch processing
- administration
- configuration
- YARA
- engines
- stats.
It is important to note that, while messages may often feature the same codes, their meanings are usually dependent on the nature of your API request, as illustrated in the following tables.
Auth
| API Request | API Response | Meaning |
|---|---|---|
| POST/login | 🟩 200 | OK |
| 🟥 404 | Invalid credentials | |
| 🟥 500 | Unexpected event on server | |
| POST/logout | 🟩 200 | OK |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information | |
| 🟥 500 | Unexpected event on server | |
| POST/user/changepassword | 🟩 200 | Request processed successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server |
Analysis
| API Request | API Response | Meaning |
|---|---|---|
| POST/file | 🟩 200 | Successful file submission |
| 🟥 400 | Invalid callback URL and/or API key | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 411 | Content-length header is missing from the request | |
| 🟥 422 | Body input is empty | |
| 🟥 500 | Unexpected event on server | |
| 🟥 503 | Server is too busy, scan queue is full, try again later | |
| POST/file/sync | 🟩 200 | The scan is completed before connection timeout |
| 🟥 400 | Invalid API key | |
| 🟥 403 | Unsupported Callback URL | |
| 🟥 408 | Timed out response: scan is still in progress, but the connection is timed out | |
| 🟥 411 | Content-length header is missing from the request | |
| 🟥 422 | Body input is empty | |
| 🟥 500 | Internal server error | |
| 🟥 503 | Server is too busy, scan queue is full, try again later | |
| GET/file/{data_id} | 🟩 200 | Entire analysis report generated by MetaDefender Core |
| 🟥 500 | Unexpected event on server | |
| GET/file/{data_id}/blocked-leaves | 🟩 200 | Returns list of blocked leaf files |
| 🟥 404 | Request’s resource was not found | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| GET/archive/{data_id} | 🟩 200 | Entire analysis report, containing all extracted files, generated by MetaDefender Core |
| 🟥 500 | Unexpected event on server | |
| GET/hash/{md5|sha1|sha256} | 🟩 200 | Get information or file |
| 🟥 404 | Invalid hash format | |
| GET/file/webhook/{data_id} | 🟩 200 | Webhooks status fetched successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 404 | Request’s resource was not found | |
| 🟥 500 | Unexpected event on server | |
| GET/file/rules | 🟩 200 | Returns the list of available rules |
| 🟥 500 | Unexpected event on server | |
| GET/file/converted/{data_id} | 🟩 200 | Returns the sanitized content |
| 🟥 404 | Request’s resource was not found | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| GET/file/download/{data_id} | 🟩 200 | Returns the sanitized or DLP processed content |
| 🟥 404 | Request’s resource was not found | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| GET/quarantine/{sha256}/download | 🟩 200 | Returns the quarantined file |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 404 | Request’s resource was not found | |
| 🟥 500 | Unexpected event on server | |
| POST/file/{data_id}/cancel | 🟩 200 | Batch canceled or analysis successfully canceled |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 404 | Batch not found (invalid ID) or request resource not found | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server |
Batch
| API Request | API Response | Meaning |
|---|---|---|
| POST/file/batch | 🟩 200 | Batch created successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 500 | Unexpected event on server | |
| POST/file/batch/{batchId}/close | 🟩 200 | Batch request successfully closed |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 404 | Request’s resource was not found | |
| 🟥 500 | Unexpected event on server | |
| GET/file/batch/{batchID} | 🟩 200 | Batch progress paginated report (50 entries/page) |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 404 | Request’s resource was not found | |
| 🟥 500 | Unexpected event on server | |
| GET/file/batch/{batchId}/certificate | 🟩 200 | Signed batch result and certificate are sent back in response body (YAML format) |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 404 | Request’s resource was not found | |
| 🟥 500 | Unexpected event on server | |
| POST/file/batch/{batchId}/cancel | 🟩 200 | Batch canceled |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 404 | Batch not found (invalid ID) | |
| 🟥 500 | Unexpected event on server |
Admin
| API Request | API Response | Meaning |
|---|---|---|
| GET/admin/export | 🟩 200 | Request processed successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| GET/admin/export/v2 | 🟩 200 | Request processed successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| POST/admin/import | 🟩 200 | Request processed successfully |
| ⬜ 304 | The configuration has not changed | |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| POST/admin/import/v2 | 🟩 200 | Request processed successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| POST/admin/user | 🟩 200 | Request processed successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 404 | Batch not found (invalid ID) | |
| 🟥 500 | Unexpected event on server | |
| POST/admin/role | 🟩 200 | Request processed successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| GET/admin/license/backup | 🟩 200 | Request processed successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 500 | Unexpected event on server | |
| POST/admin/license/backup | 🟩 200 | Request processed successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 500 | Unexpected event on server | |
| POST/admin/license/backup/nomination | 🟩 200 | Request processed successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 500 | Unexpected event on server |
License
| API Request | API Response | Meaning |
|---|---|---|
| POST/admin/license/activation | 🟩 200 | Request processed successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 500 | Unexpected event on server | |
| POST/admin/license | 🟩 200 | Request processed successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 500 | Unexpected event on server | |
| GET/admin/license | 🟩 200 | Request processed successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 500 | Unexpected event on server |
Config
| API Request | API Response | Meaning |
|---|---|---|
| PUT/admin/config/auditlog | 🟩 200 | Successful file submission |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| PUT/admin/config/quarantine | 🟩 200 | The scan is completed before connection timeout |
| 🟥 403 | Unsupported Callback URL | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| PUT/admin/config/sanitize | 🟩 200 | Request processed successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| PUT/admin/config/scanhistory | 🟩 200 | Request processed successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| PUT/admin/config/session | 🟩 200 | Request processed successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| PUT/admin/config/update | 🟩 200 | Request processed successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| GET/admin/config/skip | 🟩 200 | A list of all skip/white/black listed hashes |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| PUT/admin/config/skip | 🟩 200 | Put a list of all skip/white/black listed hashes to the server |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 404 | Request’s resource was not found | |
| 🟥 500 | Unexpected event on server | |
| POST/admin/config/skip | 🟩 200 | Add a list of all skip/white/black listed hashes to the server |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 404 | Batch not found (invalid ID) or request resource not found | |
| 🟥 500 | Unexpected event on server | |
| DELETE/admin/config/skip | 🟩 200 | Delete list of all skip/white/black listed hashes successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 404 | Request’s resource was not found | |
| 🟥 500 | Unexpected event on server | |
| GET/admin/config/webhook | 🟩 200 | Request processed successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| PUT/admin/config/webhook | 🟩 200 | Request processed successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 404 | Request’s resource was not found | |
| 🟥 500 | Unexpected event on server | |
| GET/admin/config/proxy | 🟩 200 | A proxy list is returned |
| 🟥 403 | Invalid user information or not allowed | |
| PUT/admin/config/proxy | 🟩 200 | A proxy list is returned |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| POST/admin/config/proxy/testconnection | 🟩 200 | Request processed successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| GET/admin/config/file/sync | 🟩 200 | Request processed successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Error while requesting information | |
| PUT/admin/config/file/sync | 🟩 200 | Request processed successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Error while modifying configuration | |
| GET/admin/config/sessioncookie | 🟩 200 | Request processed successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| PUT/admin/config/sessioncookie | 🟩 200 | Request processed successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 404 | Request’s resource was not found | |
| 🟥 500 | Unexpected event on server | |
| GET/admin/config/healthcheck | 🟩 200 | Health check criterias to determine whether MetaDefender Core server status is healthy or not |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 500 | Unexpected event on server | |
| POST/admin/config/healthcheck | 🟩 200 | Health check criterias to determine whether MetaDefender Core server status is healthy or not |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 500 | Error while modifying configuration |
YARA
| API Request | API Response | Meaning |
|---|---|---|
| GET/admin/config/yara/sources | 🟩 200 | Returns a list of YARA engine sources |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 500 | Unexpected event on server | |
| PUT/admin/config/yara/sources | 🟩 200 | Returns a list of YARA engine sources |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 500 | Unexpected event on server | |
| GET/yara/package | 🟩 200 | Request processed successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 500 | Unexpected event on server | |
| POST/yara/generate | 🟩 200 | Request processed successfully |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 500 | Unexpected event on server |
Engines
| API Request | API Response | Meaning |
|---|---|---|
| POST/admin/engine/{engineId}/pin | 🟩 200 | Pin engine successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| POST/admin/engine/{engineId}/unpin | 🟩 200 | Unpin engine successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| POST/admin/engine/{engineId}/enable | 🟩 200 | Enable engine successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| POST/admin/engine/{engineId}/disable | 🟩 200 | Disable engine successfully |
| 🟥 400 | Bad request (e.g. invalid header, API key missing or invalid) | |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server |
Statistics
| API Request | API Response | Meaning |
|---|---|---|
| GET/version | 🟩 200 | Provides product ID and version information |
| 🟥 500 | Unexpected event on server | |
| GET/stat/engines | 🟩 200 | Returns an array with all engines and their details |
| GET/stat/nodes | 🟩 200 | Returns an array with all engines and their details |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| GET/stat/activeperformance | 🟩 200 | Returns an active performance report on Metadefender Core |
| 🟥 403 | Invalid user information or not allowed | |
| 🟥 405 | The user has no rights for this operation | |
| 🟥 500 | Unexpected event on server | |
| GET/readyz | 🟩 200 | The service is currently healthy |
| 🟥 500 | Unexpected event on server | |
| 🟥 503 | The service is currently unhealthy |
If you are Encountering Errors On MetaDefender Core and Are Unable To Find a Solution Within Our Documentation Or Knowledge Base, please follow these instructions on How To Create a Support Package, before creating a support case or chatting with our support engineer.
Was this page helpful?