GoDaddy: Access denied error

[superhua]

Although GoDaddy was working correctly, now when I add an API key and secret under "Domains & Certs" I receive the following error:

Access denied: GoDaddy DNS error [403] Authenticated user is not allowed access

What should my next step be?

[nebulon]

Oh that is quite a drastic change. Thanks for sharing that. I guess wildcard or manual backend it is then for you. Otherwise maybe consider to move the domain to some other provider.

[nebulon]

Are the old domains with presumably other API keys still working with GoDaddy backend for you?

[superhua]

We only have one domain, and it continues to work (as in, resolve to our website).

But when I try to add a new app, I get the following message:

DNS credentials for indychinesechurch.org are invalid. Update it in Domains & Certs view

But when I create a new GoDaddy API and enter it in Domains & Certs, I get the error in the original post.

[nebulon]

Ok so both old and new API keys/tokens are not working then. But given that you do get a 403 and not a 401 the tokens are fine as such, but they don't have access to the resource (in this case that domain you are trying to use).
Can you double-check that the token is not limited to read-only or created for some other domain/resource?

[superhua]

Update: Looks like GoDaddy has restricted access to their API.

Could we just use the Wildcard DNS set-up instead?

[nebulon]

Oh that is quite a drastic change. Thanks for sharing that. I guess wildcard or manual backend it is then for you. Otherwise maybe consider to move the domain to some other provider.

[christossioutis]

I had the same "Authenticated user is not allowed access" error pop up. I read somewhere that once you have 10 domains registered with them the API works again. I already had 9 domains, so I thought what the heck! and I bought another one. Then, the API sharted working again shortly after. I am not happy about this and I don't trust them not to change things again in the long run. But, at least it lets me kick the can down the road until I have time to transfer to a different domain provider.

[girish]

@christossioutis FWIW, we only have a couple of domains on GoDaddy and the API does work. But maybe we are on some legacy plan since those domains have been registered there for a long time.

[girish]

Spoke too soon. Our API access is gone as well

[girish]

From https://developer.godaddy.com/getstarted

Access to parts of our Domains API in Production may require meeting certain 
criteria: Availability API: Limited to accounts with 50 or more domains. Management
and DNS APIs: Limited to accounts with 10 or more domains and/or an active
Discount Domain Club – Premier Membership plan.

[FLYss]

I saw this post 2 months ago. And now I switched my domain to Cloudflare. The Cloudflare API fits for my DDNS need, like Godaddy API did. The switching is fairly simple.

[FLYss]

And I do not really get why did they remove the right to call their APIs?
Like if they don't want people to abuse their APIs. Wouldn't it be more reasonable to deploy rate limits? Like 1 API call for few hours would be enough for home usage.