The Allow header must be sent if the server responds with a 405 Method Not Allowed status code to indicate which request methods can be used.