What do the various error messages mean in MetaDefender Core Rest API?

Check Your Version:

This article applies to all MetaDefender Core V4 and V5 releases deployed on Windows or Linux systems.

For users interacting with MetaDefender Core via REST API, it is essential that you familiarize yourself with the meaning of the various coded responses and error messages that the Core might return during the course of your system administration and daily file processing flow.

Please Note:

The tables below cover possible responses to all aspects of the REST interaction process, including:

  • authorization

  • analysis

  • batch processing

  • administration

  • configuration

  • YARA

  • engines

  • stats.

It is important to note that, while messages may often feature the same codes, their meanings are usually dependent on the nature of your API request, as illustrated in the following tables.

Auth

API Request

API Response

Meaning

POST /login

🟩 200

OK


πŸŸ₯ 404

Invalid credentials


πŸŸ₯ 500

Unexpected event on server

POST /logout

🟩 200

OK


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information


πŸŸ₯ 500

Unexpected event on server

POST /user/changepassword

🟩 200

Request processed successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

Analysis

API Request

API Response

Meaning

POST /file

🟩 200

Successful file submission


πŸŸ₯ 400

Invalid callback URL and/or API key


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 411

Content-length header is missing from the request


πŸŸ₯ 422

Body input is empty


πŸŸ₯ 500

Unexpected event on server


πŸŸ₯ 503

Server is too busy, scan queue is full, try again later

POST /file/sync

🟩 200

The scan is completed before connection timeout


πŸŸ₯ 400

Invalid API key


πŸŸ₯ 403

Unsupported Callback URL


πŸŸ₯ 408

Timed out response: scan is still in progress, but the connection is timed out


πŸŸ₯ 411

Content-length header is missing from the request


πŸŸ₯ 422

Body input is empty


πŸŸ₯ 500

Internal server error


πŸŸ₯ 503

Server is too busy, scan queue is full, try again later

GET /file/{data_id}

🟩 200

Entire analysis report generated by MetaDefender Core


πŸŸ₯ 500

Unexpected event on server

GET /file/{data_id}/blocked-leaves

🟩 200

Returns list of blocked leaf files


πŸŸ₯ 404

Request’s resource was not found


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

GET /archive/{data_id}

🟩 200

Entire analysis report, containing all extracted files, generated by MetaDefender Core


πŸŸ₯ 500

Unexpected event on server

GET /hash/{md5|sha1|sha256}

🟩 200

Get information or file


πŸŸ₯ 404

Invalid hash format

GET /file/webhook/{data_id}

🟩 200

Webhooks status fetched successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 404

Request’s resource was not found


πŸŸ₯ 500

Unexpected event on server

GET /file/rules

🟩 200

Returns the list of available rules


πŸŸ₯ 500

Unexpected event on server

GET /file/converted/{data_id}

🟩 200

Returns the sanitized content


πŸŸ₯ 404

Request’s resource was not found


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

GET /file/download/{data_id}

🟩 200

Returns the sanitized or DLP processed content


πŸŸ₯ 404

Request’s resource was not found


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

GET /quarantine/{sha256}/download

🟩 200

Returns the quarantined file


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 404

Request’s resource was not found


πŸŸ₯ 500

Unexpected event on server

POST /file/{data_id}/cancel

🟩 200

Batch canceled or analysis successfully canceled


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 404

Batch not found (invalid ID) or request resource not found


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

Batch

API Request

API Response

Meaning

POST /file/batch

🟩 200

Batch created successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 500

Unexpected event on server

POST /file/batch/{batchId}/close

🟩 200

Batch request successfully closed


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 404

Request’s resource was not found


πŸŸ₯ 500

Unexpected event on server

GET /file/batch/{batchID}

🟩 200

Batch progress paginated report (50 entries/page)


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 404

Request’s resource was not found


πŸŸ₯ 500

Unexpected event on server

GET /file/batch/{batchId}/certificate

🟩 200

Signed batch result and certificate are sent back in response body (YAML format)


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 404

Request’s resource was not found


πŸŸ₯ 500

Unexpected event on server

POST /file/batch/{batchId}/cancel

🟩 200

Batch canceled


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 404

Batch not found (invalid ID)


πŸŸ₯ 500

Unexpected event on server

Admin

API Request

API Response

Meaning

GET /admin/export

🟩 200

Request processed successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

GET /admin/export/v2

🟩 200

Request processed successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

POST /admin/import

🟩 200

Request processed successfully


⬜ 304

The configuration has not changed


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

POST /admin/import/v2

🟩 200

Request processed successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

POST /admin/user

🟩 200

Request processed successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 404

Batch not found (invalid ID)


πŸŸ₯ 500

Unexpected event on server

POST /admin/role

🟩 200

Request processed successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

GET /admin/license/backup

🟩 200

Request processed successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


οΏ½οΏ½ 500

Unexpected event on server

POST /admin/license/backup

🟩 200

Request processed successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 500

Unexpected event on server

POST /admin/license/backup/nomination

🟩 200

Request processed successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 500

Unexpected event on server

License

API Request

API Response

Meaning

POST /admin/license/activation

🟩 200

Request processed successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 500

Unexpected event on server

POST /admin/license

🟩 200

Request processed successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 500

Unexpected event on server

GET /admin/license

🟩 200

Request processed successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 500

Unexpected event on server

Config

API Request

API Response

Meaning

PUT /admin/config/auditlog

🟩 200

Successful file submission


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

PUT /admin/config/quarantine

🟩 200

The scan is completed before connection timeout


πŸŸ₯ 403

Unsupported Callback URL


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

PUT /admin/config/sanitize

🟩 200

Request processed successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

PUT /admin/config/scanhistory

🟩 200

Request processed successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

PUT /admin/config/session

🟩 200

Request processed successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

PUT /admin/config/update

🟩 200

Request processed successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

GET /admin/config/skip

🟩 200

A list of all skip/white/black listed hashes


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

PUT /admin/config/skip

🟩 200

Put a list of all skip/white/black listed hashes to the server


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 404

Request’s resource was not found


πŸŸ₯ 500

Unexpected event on server

POST /admin/config/skip

🟩 200

Add a list of all skip/white/black listed hashes to the server


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 404

Batch not found (invalid ID) or request resource not found


πŸŸ₯ 500

Unexpected event on server

DELETE /admin/config/skip

🟩 200

Delete list of all skip/white/black listed hashes successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 404

Request’s resource was not found


πŸŸ₯ 500

Unexpected event on server

GET /admin/config/webhook

🟩 200

Request processed successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

PUT /admin/config/webhook

🟩 200

Request processed successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 404

Request’s resource was not found


πŸŸ₯ 500

Unexpected event on server

GET /admin/config/proxy

🟩 200

A proxy list is returned


πŸŸ₯ 403

Invalid user information or not allowed

PUT /admin/config/proxy

🟩 200

A proxy list is returned


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)

POST /admin/config/proxy/testconnection

🟩 200

Request processed successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)

GET /admin/config/file/sync

🟩 200

Request processed successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Error while requesting information

PUT /admin/config/file/sync

🟩 200

Request processed successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Error while modifying configuration

GET /admin/config/sessioncookie

🟩 200

Request processed successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

PUT /admin/config/sessioncookie

🟩 200

Request processed successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 404

Request’s resource was not found


πŸŸ₯ 500

Unexpected event on server

GET /admin/config/healthcheck

🟩 200

Health check criterias to determine whether MetaDefender Core server status is healthy or not


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 500

Unexpected event on server

POST /admin/config/healthcheck

🟩 200

Health check criterias to determine whether MetaDefender Core server status is healthy or not


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 500

Error while modifying configuration

YARA

API Request

API Response

Meaning

GET /admin/config/yara/sources

🟩 200

Returns a list of YARA engine sources


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 500

Unexpected event on server

PUT /admin/config/yara/sources

🟩 200

Returns a list of YARA engine sources


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 500

Unexpected event on server

GET /yara/package

🟩 200

Request processed successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 500

Unexpected event on server

POST /yara/generate

🟩 200

Request processed successfully


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 500

Unexpected event on server

Engines

API Request

API Response

Meaning

POST /admin/engine/{engineId}/pin

🟩 200

Pin engine successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

POST /admin/engine/{engineId}/unpin

🟩 200

Unpin engine successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

POST /admin/engine/{engineId}/enable

🟩 200

Enable engine successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

POST /admin/engine/{engineId}/disable

🟩 200

Disable engine successfully


πŸŸ₯ 400

Bad request (e.g. invalid header, API key missing or invalid)


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

Statistics

API Request

API Response

Meaning

GET /version

🟩 200

Provides product ID and version information


πŸŸ₯ 500

Unexpected event on server

GET /stat/engines

🟩 200

Returns an array with all engines and their details

GET /stat/nodes

🟩 200

Returns an array with all engines and their details


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

GET /stat/activeperformance

🟩 200

Returns an active performance report on Metadefender Core


πŸŸ₯ 403

Invalid user information or not allowed


πŸŸ₯ 405

The user has no rights for this operation


πŸŸ₯ 500

Unexpected event on server

GET /readyz

🟩 200

The service is currently healthy


πŸŸ₯ 500

Unexpected event on server


πŸŸ₯ 503

The service is currently unhealthy

Support:

If you are Encountering Errors On MetaDefender Core and Are Unable To Find a Solution Within Our Documentation Or Knowledge Base, please follow these instructions on How to Create Support Package With Bundle Tools?, before creating a support case or chatting with our support engineer.