Support & Troubleshooting

Troubleshooting API Errors, CORS & Rate Limits

Debug external API integrations: resolve HTTP 401 missing key errors, fix CORS origin blocks, and manage rate limit exceptions.

Common API Response Codes & Fixes

Reference these verified HTTP status codes and resolution steps when integrating BusinessPlus Connect APIs:

HTTP 401 Unauthorized ("Missing or invalid API key"): Ensure request headers include `x-api-key: YOUR_KEY` or `Authorization: Bearer YOUR_KEY` and verify the key has not been rotated in Site Settings.
HTTP 403 Forbidden ("Origin not allowed" / "Suspended"): Add your client website domain to Dashboard -> Settings -> Domains under "Allowed Domains", or renew a suspended subscription.
HTTP 429 Too Many Requests ("Rate limit exceeded"): Your site has exceeded the 1,000 requests/window rate limit. Implement client-side caching or upgrade to an Enterprise API plan.
CORS Block on Embedded Widget: If browser console displays "Blocked by CORS policy", add your website URL (e.g. `https://yourbrand.com`) to the Allowed Domains list in Site Settings.