title: What is HTTP status code for a disabled REST API feature?
body: <p>We have REST API endpoints that all users are free to use and other endpoints that users can use if they have explicitly enabled and paid for some specific feature.</p>
  
  <p>What should be the correct status code returned from the paid endpoints if it has not been enabled by the user?</p>
  
  <p>I see 2 options:</p>
  
  <ol>
  <li>402 Payment required</li>
  <li>403 Forbidden</li>
  </ol>
  
  <p>402 is described as <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/402" rel="noreferrer">a nonstandard client error status response code that is reserved for future use</a>, so I do not feel like this is the right status code for this case.</p>
  
  <p>Are there any other status codes that would fit this case better?</p>