How to complete the challenge TRACE /api/heartbeat (501)

By Alan Richardson · Published 2026-07-31

Send a TRACE request to /api/heartbeat.

Some clients hide uncommon HTTP methods. If yours does, look for a custom method option and enter TRACE.

Try it now

Browser HTTP clients cannot send TRACE methods. The HTTP client below is closed by default because it cannot complete this challenge from the browser; try it for yourself to see.

TRACE /api/heartbeat to trigger 501

Lessons Learned

• TRACE /api/heartbeat exercises an uncommon method that many clients or browsers restrict.
• 501 Not Implemented means the server does not implement the requested method behavior.
• Client tooling can be part of the test risk when a method is not widely exposed.

Suggested Experiments

• Try TRACE /api/heartbeat in two different clients and compare whether the request can be sent at all.
• Use method override to simulate TRACE and compare with direct TRACE behavior.

Experiment with this endpoint