Common top-level types

TypeRoleExamples
textHuman-readable texttext/plain, text/html, text/css
applicationBinary or structured dataapplication/json, application/pdf, application/octet-stream
imageRaster/vector imagesimage/png, image/jpeg, image/svg+xml
audio / videoMedia containersaudio/mpeg, video/mp4
fontWeb fontsfont/woff2
multipartComposite bodiesmultipart/form-data, multipart/byteranges

Sniffing vs declared type

Browsers may sniff content when Content-Type is missing or generic. For uploads, validate both extension and magic bytes server-side — MIME from the client is untrusted.