For a website, this is 100% correct, but for an API I prefer returning a 201 CREATED response along with a reference to the new list (either a URL or just an id). For instance, the body could be {"list_id": ...}, and then the UI can decide what it wants to do with that (it's cleaner that having the UI read the Location: field from a 3xx redirect).