# REST API: Error 1020 Access Denied on /orders endpoint

**URL:** <https://integration.keap.com/t/rest-api-error-1020-access-denied-on-orders-endpoint/80972>\
**Category:** API Q&A\
**Tags:** api\
**Created:** [November 23, 2020, 7:56pm UTC](https://integration.keap.com/t/rest-api-error-1020-access-denied-on-orders-endpoint/80972 "2020-11-23T19:56:23Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sound\_Commerce](https://avatars.discourse-cdn.com/v4/letter/s/b77776/32.png) [@Sound\_Commerce](https://integration.keap.com/u/Sound_Commerce)\
**Post date:** [November 23, 2020, 7:56pm UTC](https://integration.keap.com/t/rest-api-error-1020-access-denied-on-orders-endpoint/80972/1 "2020-11-23T19:56:23Z")

</div>

We are unable to access [/orders endpoint](https://developer.infusionsoft.com/docs/rest/#!/E-Commerce/listOrdersUsingGET), receiving the following response:

```
Error 1020
Ray ID: 5f6d1aeabaadf555 • 2020-11-23 18:55:33 UTC
Access denied
What happened?
This website is using a security service to protect itself from online attacks.

Cloudflare Ray ID: 5f6d1aeabaadf555 • Your IP: {OUR-IP}• Performance & security by Cloudflare

```

Using the same access token, all other endpoints (e.g. /products, /contacts, /subscription, /tags and /transactions) are working fine.

Sample List Orders Request:

```
curl --location --request GET 'https://api.infusionsoft.com//crm/rest/v1/orders?since=2020-10-20T22:38:14.038Z&until=2020-11-19T22:38:14.038Z&limit=1000&offset=23000' \
--header 'Authorization: Bearer {MY-ACCESSTOKEN}'

```

Please verify.

Thank you.

---

<div class="post-metadata">

**Author:** ![John\_Borelli](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/john_borelli/32/11880_2.png) [@John\_Borelli](https://integration.keap.com/u/John_Borelli)\
**Post date:** [November 23, 2020, 10:21pm UTC](https://integration.keap.com/t/rest-api-error-1020-access-denied-on-orders-endpoint/80972/2 "2020-11-23T22:21:35Z")

</div>

I moved this to the API Q&A forum…not many general IS users will understand it.

@bradb, any idea what might be causing this one?

---

<div class="post-metadata">

**Author:** ![TomScott](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/tomscott/32/67_2.png) [@TomScott](https://integration.keap.com/u/TomScott)\
**Post date:** [November 23, 2020, 11:25pm UTC](https://integration.keap.com/t/rest-api-error-1020-access-denied-on-orders-endpoint/80972/3 "2020-11-23T23:25:16Z")

</div>

> [@Sound\_Commerce](#):
>
> `https://api.infusionsoft.com//crm/rest/v1/orders`

`https://api.infusionsoft.com//crm/rest/v1/orders` should be `https://api.infusionsoft.com/crm/rest/v1/orders`, but other than that, you might have triggered CloudFlare’s anti DDOS measures somehow.

---

<div class="post-metadata">

**Author:** ![bradb](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/bradb/32/13_2.png) [@bradb](https://integration.keap.com/u/bradb)\
**Post date:** [November 30, 2020, 7:43pm UTC](https://integration.keap.com/t/rest-api-error-1020-access-denied-on-orders-endpoint/80972/4 "2020-11-30T19:43:48Z")

</div>

`1020` is the response when our SRE team has blocked traffic due to excessive use. Reach out to API Support.

---

<div class="post-metadata">

**Author:** ![Tommy\_Cunningham](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/tommy_cunningham/32/12981_2.png) [@Tommy\_Cunningham](https://integration.keap.com/u/Tommy_Cunningham)\
**Post date:** [June 23, 2021, 11:17am UTC](https://integration.keap.com/t/rest-api-error-1020-access-denied-on-orders-endpoint/80972/5 "2021-06-23T11:17:59Z")

</div>

Hi bradb,

We have just gotten this error and we use the API for a lot of our processes and systems and we need to get it back online.

Is there a phone number I can call to get support now as we can’t have these processes offline?

---

<div class="post-metadata">

**Author:** ![Min\_Liu](https://avatars.discourse-cdn.com/v4/letter/m/54ee81/32.png) [@Min\_Liu](https://integration.keap.com/u/Min_Liu)\
**Post date:** [June 23, 2021, 1:55pm UTC](https://integration.keap.com/t/rest-api-error-1020-access-denied-on-orders-endpoint/80972/6 "2021-06-23T13:55:00Z")

</div>

Same here, this suddenly happened at noon.

Have you sorted it out?

Btw, the opportunity endpoint is fine as usual but contacts is dead

---

<div class="post-metadata">

**Author:** ![Matt\_Johnson1](https://avatars.discourse-cdn.com/v4/letter/m/edb3f5/32.png) [@Matt\_Johnson1](https://integration.keap.com/u/Matt_Johnson1)\
**Post date:** [June 23, 2021, 2:10pm UTC](https://integration.keap.com/t/rest-api-error-1020-access-denied-on-orders-endpoint/80972/7 "2021-06-23T14:10:20Z")

</div>

I have been suddenly getting this error too. Just replying to [a] share that it’s happening and [b] in the hopes I’ll get some kind of notification when it gets resolved?

---

<div class="post-metadata">

**Author:** ![Vasanth\_Methkupalli1](https://avatars.discourse-cdn.com/v4/letter/v/b3f665/32.png) [@Vasanth\_Methkupalli1](https://integration.keap.com/u/Vasanth_Methkupalli1)\
**Post date:** [June 23, 2021, 2:39pm UTC](https://integration.keap.com/t/rest-api-error-1020-access-denied-on-orders-endpoint/80972/9 "2021-06-23T14:39:50Z")

</div>

We have had an outage on Contacts, that has now been resolved. Please let us know if the issue persists.

---

<div class="post-metadata">

**Author:** ![bradb](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/bradb/32/13_2.png) [@bradb](https://integration.keap.com/u/bradb)\
**Post date:** [June 23, 2021, 2:41pm UTC](https://integration.keap.com/t/rest-api-error-1020-access-denied-on-orders-endpoint/80972/10 "2021-06-23T14:41:56Z")

</div>

Our normal support numbers and chat are good options. [https://help.keap.com/help/contact-support](https://help.keap.com/help/contact-support)
