\
**Category:** API Issues\
**Created:** [October 2, 2026, 1:18pm UTC](http://forum.companieshouse.gov.uk/t/rest-api-works-in-development-but-returns-html-403-from-deployed-crm/13048 "2026-10-02T13:18:58Z")\
**Posts on this page:** 2\
**Page:** 1
**Author:**  [@favour](http://forum.companieshouse.gov.uk/u/favour)\
**Post date:** [October 2, 2026, 1:18pm UTC](http://forum.companieshouse.gov.uk/t/rest-api-works-in-development-but-returns-html-403-from-deployed-crm/13048/1 "2026-10-02T13:18:58Z")
- Application name: **LimitraCRM**
- Live REST API key; **Restricted IPs is blank**
- A new key was configured and the CRM republished, but LIVE still fails
- DEV returns **200** ; LIVE returns **403 with an HTML access-denied response**
- Endpoint: `https://api.company-information.service.gov.uk/search/companies`
- Failed request time: **2 October 2026, 10:11:33.751 UTC**
\*\*Can you check whether your firewall blocked this request, and tell us what information you need to identify the blocked source?
Can someone help me with this issue please?\*\*
---
**Author:**  [@companieshousedata](http://forum.companieshouse.gov.uk/u/companieshousedata)\
**Post date:** [October 5, 2026, 8:52am UTC](http://forum.companieshouse.gov.uk/t/rest-api-works-in-development-but-returns-html-403-from-deployed-crm/13048/2 "2026-10-05T08:52:33Z")
Using your live key, does this throw a 403?
`curl --config NUL --basic --user "YOUR_LIVE_KEY:" --header "Accept: application/json" --header "User-Agent: LimitraCRM/1.0" --verbose "https://api.company-information.service.gov.uk/company/17145528"`
And this?
`curl --config NUL --basic --user "YOUR_LIVE_KEY:" --header "Accept: application/json" --header "User-Agent: LimitraCRM/1.0" --verbose "https://api.company-information.service.gov.uk/search/companies?q=Limitra"`