Thanks for the reply! It's actually up and running, but if the response says "forbidden" it's likely because I blanket-block a lot of non-US IPs, AWS IP ranges, etc. because of annoying crawlers. This is bad practice, but I do it for several reasons. I've turned off some blanket-blocking for now.

If you see this comment, would you mind sharing if you were making a request from a US-based IP, VPN, or outside the US? Just curious - it'll help me understand things a bit better.

Try again if you wish :)