REST API works in development but returns HTML 403 from deployed CRM

API Issues
1
  • Application name: LimitraCRM
  • Live REST API key; Restricted IPs is blank
  • A new key was configured and the CRM republished, but LIVE still fails
  • DEV returns 200; LIVE returns 403 with an HTML access-denied response
  • Endpoint: https://api.company-information.service.gov.uk/search/companies
  • Failed request time: 2 October 2026, 10:11:33.751 UTC

**Can you check whether your firewall blocked this request, and tell us what information you need to identify the blocked source?

Can someone help me with this issue please?**

2

Using your live key, does this throw a 403?
curl --config NUL --basic --user "YOUR_LIVE_KEY:" --header "Accept: application/json" --header "User-Agent: LimitraCRM/1.0" --verbose "https://api.company-information.service.gov.uk/company/17145528"

And this?
curl --config NUL --basic --user "YOUR_LIVE_KEY:" --header "Accept: application/json" --header "User-Agent: LimitraCRM/1.0" --verbose "https://api.company-information.service.gov.uk/search/companies?q=Limitra"