Skip to main content

The problem

When making API requests, you may receive an HTML error page instead of the expected JSON response:

Why this happens

This block is a platform security measure. The API has a firewall that monitors request origins and blocks traffic from unusual or suspicious locations. The firewall protects both the platform and integrators from attacks and malicious activity.

Security technologies

We use security services to protect the infrastructure:
  • Cloudfront: Amazon Web Services content delivery network.
  • AWS WAF: Amazon Web Services web application firewall.
These tools analyze traffic and block requests from locations that are not recognized as safe or that show suspicious patterns.

Accepted locations

Requests are allowed when they originate from locations considered safe, such as:
  • Brazil
  • United States
  • Portugal
  • Other locations considered safe

How to resolve it

If you are facing this issue, the solution is to change the request origin to one of the accepted locations above. You can do this by:
  • Using a server located in one of the accepted countries, such as Brazil, the United States, or Portugal.
  • Using a VPN with a server in one of the accepted countries.
  • Using cloud services, such as AWS, Google Cloud, or Azure, with servers in data centers in accepted countries.

Summary

  • The block happens when the request comes from a location that is not recognized as safe.
  • The response is an HTML error page instead of JSON.
  • The solution is to change the request origin to a server located in Brazil, the United States, Portugal, or another safe location.
  • It is not possible to request an exception or IP whitelist for this type of block.