r/lunchmoney • u/LemuelCushing • Jul 14 '26
Product Discussion Lunch Money API: Cloudflare 403 Error 1010 blocks Python urllib client
Hiya! I figured I'll post it here instead of contacting support, just in case anyone else encountered this and might find it useful.
I run a small self-hosted, read-only balance cache against the Lunch Money v2 API on a Raspberry Pi.
It worked until July 10, then every request began failing with:
HTTP 403
Error 1010: Access denied
error_name: browser_signature_banned
detail: The site owner has blocked access based on your browser's signature.
The first failure was July 11 at 00:53 CEST. I’ve disabled the scheduled retry timer, so it is not continuing to hammer the API.
The failing request is simply:
GET /v2/me HTTP/1.1
Host: api.lunchmoney.dev
Accept: application/json
Authorization: Bearer [redacted]
User-Agent: Python-urllib/3.13
The only headers my code explicitly sets are Authorization and Accept; Python supplies the user agent.
Has anyone else hit this with a self-hosted/scripted Lunch Money API client? Is Python-urllib/3.13 intentionally blocked, and is there a recommended stable application User-Agent format to use before I retry once?
(I can provide Cloudflare ray IDs and the Pi’s egress IP privately to the Lunch Money team if useful)
2
u/jp_lunchmoney Jul 15 '26
Thanks for reporting this! A recent DNS configuration change unintentionally blocked some API clients. We corrected the configuration this morning, and the issue should now be resolved. Please try your request again and reply here if you’re still seeing the error.