Title: Fix 403 Forbidden Error When Using the API  
PrimaryCategory: API  
Type: Informational  
Tags: 403_error, api_requests, security, https, tls, ipv6, troubleshooting  
Source UI Terms: None  
Source Reference: Fix 403 Forbidden Error When Using the API  

Key Info:  
A 403 Forbidden error when making API requests often occurs due to security or connection protocol issues. To resolve this error when building or using custom portals interfacing with the API, ensure the following conditions are met:  

- Use HTTPS for all API calls. HTTP traffic is not accepted due to PCI compliance requirements.  
- Use TLS version 1.2 or higher. Older versions like TLS 1.0 or 1.1 are deprecated and can cause connection failures because the API enforces TLS v1.2+ for secure communication.  
- Disable IPv6 on the machine sending the API requests since the API servers do not support IPv6 addresses currently.  

Summary:  
To fix 403 Forbidden errors with API calls, use HTTPS only, upgrade your connection protocol to TLS v1.2 or above, and disable IPv6 on your sending device.  

Evaluation Pairs:  
Q: Why am I getting a 403 Forbidden error when making API requests?  
A: The error is likely because you are not using HTTPS, your system uses TLS below version 1.2, or your machine has IPv6 enabled which the API does not support.  

Q: What version of TLS is required for API requests?  
A: TLS version 1.2 or above is required to connect securely to the API.  

Q: Can I make API requests over HTTP?  
A: No, HTTP is not accepted; all API requests must be sent using HTTPS to comply with PCI standards.

When your API requests return a 403 Forbidden error. This article explains common causes of 403 errors during API requests. If you are building a custom portal for interacting with our platform using our API, and if you receive a 403 Forbidden error message, then please check the following: 
<ul><li>Use HTTPS to send API calls In order to comply with PCI standards, our system does not accept or serve traffic on HTTP. All API requests must be made on HTTPS only.  </li><li>Use TLS v1.2 or above In order to comply with the latest security standards, we have enforced TLS v1.2 on our API and other services connecting to our platform. If your system is running TLS v1.0 or v1.1, then you may face issues. Please upgrade your application/system to TLS v1.2 or above.  </li><li>Disable IPv6 Our API servers do not currently support IPv6. Hence, please disable IPv6 on the machine from where you are sending API calls.  </li></ul>

When your API requests return a 403 Forbidden error. This article explains common causes of 403 errors during API requests.