.png&w=3840&q=75)
Domain Name Search3 min
Decoding EPP Status Codes: Client vs. Server Flags
NS
NameSilo Staff10/7/2026
Share
Decoding EPP Status Codes: Client vs. Server Flags
EPP status codes dictate the operational state of a domain name. A "client" status code (like clientTransferProhibited) is applied by your retail registrar and can typically be removed by logging into your account dashboard. A "server" status code (like serverUpdateProhibited) is applied directly by the overarching registry, overriding the registrar entirely, often due to legal disputes or premium security locks.
What Is the Extensible Provisioning Protocol?
EPP is the standardized protocol registrars use to communicate with domain registries, handling registration, renewal, transfer, and status changes in a consistent machine-readable format. Every domain carries one or more status codes at all times, describing exactly what operations are currently permitted or blocked. Understanding which layer set a given flag, registrar or registry, is the single most important skill for diagnosing why an API call or dashboard action just got rejected.
Client vs Server: The Core Distinction
Client Codes | Server Codes | |
Set by | Your registrar | The registry itself |
Removable by | You, via account dashboard | Only the registry, often requiring registrar or legal intervention |
Typical cause | Standard security lock, billing issue or abuse | Legal dispute, compliance mandate, premium enterprise lock |
Example | clientTransferProhibited | serverTransferProhibited |
Deep Dive: Client-Level Codes
Client codes are applied by your registrar as standard account protections, and you can generally toggle them yourself. clientTransferProhibited blocks transfers to another registrar, the default state every domain enters upon registration to prevent unauthorized hijacking. clientDeleteProhibited and clientRenewProhibited similarly guard against accidental or malicious deletion and non-renewal. These exist to protect you, not restrict you, and removing them takes seconds when you actually need to.
Deep Dive: Server-Level Codes
Server codes come directly from the registry, bypassing your registrar's control entirely. serverTransferProhibited, serverUpdateProhibited, and similar flags typically appear during active legal disputes (like a UDRP proceeding), compliance investigations, or when a domain is enrolled in a premium Registry Lock service for enterprise-grade hijacking protection. No amount of dashboard clicking removes a server-level flag; it requires resolution at the registry level, sometimes through your registrar acting as an intermediary, sometimes only through the dispute process itself.
The Dreaded "Hold" Statuses
clientHold and serverHold both stop a domain from resolving entirely, but for very different reasons. clientHold usually traces back to your registrar, typically a billing failure or unverified WHOIS contact information, and is generally resolvable by fixing the underlying account issue. serverHold comes from the registry itself, most commonly following an abuse investigation or takedown action, and represents a far more serious situation requiring direct engagement with the registry or law enforcement processes.
Common Mistakes
Submitting API update commands against a domain with active UpdateProhibited flags: This produces a frustrating rejection loop, the same command failing repeatedly with a syntax-sounding error that's actually a permissions issue. Always check the domain's current EPP status before troubleshooting the API call itself; the fix is often removing the prohibiting flag first, not debugging your request format.
What This Means for You
Check any domain's current EPP status instantly via WHOIS. NameSilo includes free Domain Locking on every domain by default, toggleable instantly from your dashboard, with Registry Lock available as a premium option for enterprise-level protection against server-side threats.
Frequently Asked Questions
What are EPP status codes? Standardized flags describing what actions are currently permitted on a domain.
What does clientTransferProhibited mean?
Your registrar has blocked transfers to another registrar; toggleable in your dashboard.
How do I remove serverUpdateProhibited?
Contact your registrar or the registry directly; it can't be self-removed.
What is the difference between clientHold and serverHold?
clientHold is registrar-side (often billing or abuse); serverHold is registry-side (often abuse).
Why is my domain status inactive?
Check for a Hold status, indicating the domain currently isn't resolving.
What is an EPP authorization code?
A unique code required to authorize transferring a domain to another registrar.
Can a registrar override a server status code?
No. Server-level flags are set and controlled directly by the registry.
Where do I check my domain EPP status at NameSilo?
Via WHOIS lookup or directly within Domain Manager.
.png&w=2048&q=75)
NameSilo StaffThe NameSilo staff of writers worked together on this post. It was a combination of efforts from our passionate writers that produce content to educate and provide insights for all our readers.
More articleswritten by NameSilo
.png&w=3840&q=75)
.png&w=3840&q=75)
.png&w=3840&q=75)