Constant 403 Rate-Limiting on REST API (/v1/playersTable) & Registration Link 404

[msncakma]

Description

I am developing an external web app/service that fetches metrics from the Plan REST API (/v1/playersTable). However, the service constantly gets throttled with a 403 Forbidden: You are being rate-limited response.

Additionally, I am unable to obtain or generate an API token to authenticate requests:

1. Running /plan register (or /register) in-game generates a link that returns a 404 Not Found error in the browser.
2. I cannot find the proper workflow or documentation to generate/export an API token for headless/external API consumption.

---

Error Log

[PLAN API FATAL] 403 Forbidden! The Plan server rejected the connection.
- Check if 127.0.0.1 or your server IP is in the Plan config.yml 'Webserver.Security.API_whitelist'
- Ensure your PLAN_API_TOKEN is correct (if using one).
- Target URL: http://127.0.0.1:22333/v1/playersTable

[PlanApiClient] Request failed for http://127.0.0.1:22333/v1/playersTable: Error: Plan API error: 403 Forbidden - Response Body: <h1>403 Forbidden</h1><p>You are being rate-limited.</p>
    at PlanApiClient.request (/server/plan/planClient.ts:62:16)
    at async PlanService.fetchPlayersTable (/server/plan/planService.ts:100:23)

---

Steps to Reproduce

1. Query the endpoint [http://127.0.0.1:22333/v1/playersTable](http://127.0.0.1:22333/v1/playersTable) via an external Node.js backend.
2. Observe 403 Forbidden (You are being rate-limited) after initial requests.
3. Run the register command in-game to attempt generating access credentials.
4. Follow the generated URL -> Results in a 404 Page.

---

Questions / Expected Behavior

• What is the correct method to authenticate external/backend scripts with an API token or bypass rate limits on localhost (127.0.0.1)?
• Why does the /plan register link return a 404, and how can the registration endpoint be accessed properly?

---

Environment Details

• Plan Version: [Insert your Plan version here, e.g., 5.6.x]
• Server Platform & Version: Paper / Velocity [Insert Minecraft/Proxy version]
• Access Method: Internal HTTP request via Localhost (127.0.0.1:22333)

[AuroraLS3]

Registration requires HTTPS https://github.com/plan-player-analytics/Plan/wiki/SSL-Certificate-%28HTTPS%29-Set-Up

Rate limit is 30 requests to the same endpoint within 120 seconds.

There is a cache that prevents new data from being queried if the data is too new (<1 minute old) so querying this endpoint more than twice per minute does not make sense.

---

I will not give further answers since your question was generated by AI.