# API problem **URL:** \ **Category:** Hosting Support\ **Created:** [November 7, 2026, 6:35am UTC](https://forum.infinityfree.com/t/api-problem/121831 "2026-11-07T06:35:41Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Arash1](https://forum.infinityfree.com/letter_avatar/arash1/32/6_22734026db12803ebb3e059622ac3534.png) [@Arash1](https://forum.infinityfree.com/u/Arash1)\ **Post date:** [November 7, 2026, 6:35am UTC](https://forum.infinityfree.com/t/api-problem/121831/1 "2026-11-07T06:35:41Z")
### Website URL [https://xware.gt.tc](https://xware.gt.tc) ### Error Message Using APIs in my forum website. ### Other Information Hello so I had problem with my website and I read this article > [@how to disable this anti-bot protection](https://forum.infinityfree.com/t/how-to-disable-this-anti-bot-protection/99439/2): > > Hi and welcome to the forum if you own your domain [you can use Cloudflare](https://forum.infinityfree.com/t/44451) and the hosting trusts Cloudflare enough so that then there are no bot checks. Please pay attention to this sentence InfinityFree is a website hosting service. That means that the hosting accounts we provided are intended for hosting websites. Websites contain pages that are accessed through web browsers. InfinityFree is not intended to be used for file sharing, API hosting, database hosting or background tasks/to… And thought about can I use infinity free domain as a frontend and also connect the cloudflare domain and request the APIs from the cf domain? ---
**Author:** ![system](https://infinityfree-forum-uploads.s3.dualstack.eu-central-1.amazonaws.com/original/3X/b/0/b024fd3fa88bae093c9576e55c2c94e33f890206.svg) [@system](https://forum.infinityfree.com/u/system)\ **Post date:** [November 7, 2026, 6:35am UTC](https://forum.infinityfree.com/t/api-problem/121831/2 "2026-11-07T06:35:41Z")
Welcome to the InfinityFree community forum! Good to have you here. - Most people answering here are volunteers. They’re often the fastest source of help. Admin (the only staff member) checks in about once a day for issues on our end. - Volunteers can’t see your account or website. Share what you actually see, like error messages and what happens when you try something. That’s more useful than your theory of what’s wrong. - AI tools often get InfinityFree wrong. If a volunteer’s advice differs from what an AI told you, please try the volunteer’s suggestion first. - Solving an issue is a joint effort. Try the suggestions you get and report back what happened. ---
**Author:** ![Lemni](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/lemni/32/68303_2.png) [@Lemni](https://forum.infinityfree.com/u/Lemni)\ **Post date:** [November 7, 2026, 6:36am UTC](https://forum.infinityfree.com/t/api-problem/121831/3 "2026-11-07T06:36:20Z")
_Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look._ It depends on where the API code would actually run, so which is it? Is the Cloudflare domain pointed at your InfinityFree account, or would the API be hosted somewhere else, such as another provider or a Cloudflare service? If the Cloudflare domain just points at your InfinityFree hosting, it won’t help. The browser security check is part of the hosting, not the domain, so it covers every URL on the account and can’t be turned off for one path. The article says this directly: > [@Browser Security System - Features and Limitations](https://forum.infinityfree.com/docs?topic=49353): > > InfinityFree uses a security system on all free hosting accounts to ensure your website is accessed by real web browsers, not bots or automated scripts. While this protects your site from malicious traffic, it can affect certain types of access. How the security system works The system checks that visitors can execute JavaScript and accept cookies: features that all modern web browsers support. This verification happens automatically and most website visitors will never notice it. You may occa… The article describes what’s blocked: REST API requests from tools and scripts, and AJAX requests from other domains (CORS). It also says what keeps working: JavaScript calls to endpoints on the same domain, and your site’s own server-side code making requests to external services. The check only applies to requests coming in to an InfinityFree site, so an API hosted elsewhere wouldn’t be subject to it. The articles don’t describe that exact setup, though, so I can’t promise how it would behave. The second article lists your options for API access: [premium hosting](https://www.infinityfree.com/premium/), a different service for the API, or having your site make outbound requests. > [@Why isn't API access working on my website?](https://forum.infinityfree.com/docs?topic=115198): > > If you’re trying to use APIs on your InfinityFree website and they’re not working, this is due to our browser security system that’s required on all free hosting accounts. What’s happening? InfinityFree uses a security system that requires JavaScript and cookies to access websites. APIs and automated tools typically can’t execute JavaScript or store cookies, so they get blocked by the security system. When API clients try to connect, they usually receive a “403 Forbidden” error or a HTML respo… ---
**Author:** ![KangJL](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/kangjl/32/12130_2.png) [@KangJL](https://forum.infinityfree.com/u/KangJL)\ **Post date:** [November 7, 2026, 7:23am UTC](https://forum.infinityfree.com/t/api-problem/121831/4 "2026-11-07T07:23:43Z")
> [@Arash1](#): > > and I read this article The loophole has been closed