Troubleshooting 403 errors in GravityBoard
If you are seeing 403 Forbidden errors when trying to use GravityBoard, it usually means your server or hosting environment is blocking the API requests that GravityBoard needs in order to work.
What’s happening #
GravityBoard relies on the WordPress REST API to fetch and display your boards. You can check this by visiting these URLs in your browser.
Make sure to replace example.com with your site path!
https://example.com/wp-json/If that works, confirm the GravityBoard endpoint works.
https://example.com/wp-json/gravityboard/v1/And finally, confirm that the /boards/ endpoint works:
https://example.com/wp-json/gravityboard/v1/boards/If any of these return a 403 Forbidden error, it will prevent GravityBoard from functioning properly.
Likely cause #
The issue is not within GravityBoard itself. Instead, it is usually caused by your server configuration or security firewall (such as ModSecurity, a WAF, or a host-level rule) that incorrectly blocks requests to REST API endpoints.
How to Fix It #
Check the URLs above
Confirm whether the boards endpoint is being blocked.
Check your logs
Review your server/hosting logs around the time the error occurs. You’ll often see a firewall or security rule denying access.
Contact your hosting provider
Ask your host to adjust or whitelist the rules that are blocking REST API access to the following path, and any subpaths:
/wp-json/gravityboard/Confirm access after adjustments
After your host updates the rules, reload GravityBoard. The error should be resolved.
Next steps #
If the issue persists even after your hosting provider has made adjustments, please reach out to GravityKit support with details of your hosting environment and any firewall/security plugins you may be using.
