Server error when creating new API key in account settings

simonstjohn
Hi everyone,

I’m trying to create a new API key in my Zotero account, but every time I click “Create new key” (on the Security settings page), I get a generic server error:

“Server error / Something went wrong processing your request”

I’ve tried:

Logging out and back in

Clearing cookies and cache for zotero.org

Using an incognito/private window

Trying a different browser

The error happens consistently, so I’m not sure if it’s a temporary issue on Zotero’s side or something specific to my account.

Has anyone else experienced this recently? If so, did you find a workaround, or was it resolved on Zotero’s end?

My setup:

Browser(s) tried: Chroime and Brave latest versions

OS: Wibndows 11

Zotero account age: Under 12 months old

Time of first attempt: 27/5/2025 2.00pm AEST

Thanks in advance.
  • dstillman Zotero Team
    Your IP address has been automatically blocked due to automated attacks against Zotero user accounts coming from that IP address within the last 24 hours.

    If this is a residential IP address, you should check all your devices for malware. If it's a shared IP address, you should report it to the ISP or network administrator so they can identify the source of the malicious traffic.
  • simonstjohn
    edited 27 days ago
    Thanks for the context.

    I suspect my API script for reclassifying and querying my collection is what triggered the automated system, as I may not have rate-limited the requests properly.

    I am on a standard home network and run full antivirus watch meticulously so I am pretty sure its a rate limit issue, for which I apologiese.

    Could you please clear the block for my IP, and let me know what the recommended request rate limit is so I can adjust my script and avoid triggering this again?

    Thanks so much!

    Simon
  • dstillman Zotero Team
    No, there was an invalid request from your IP address to a private authentication endpoint, matching a pattern of requests that have been attacking Zotero user accounts over the past several months. That's why you were blocked. There were no other requests around that time, but there were other valid requests from you from the same IP address before and after.
  • simonstjohn
    Hi Dan,

    Thanks for looking into this and for the clarification.

    Since my local security scans are entirely clean, I suspect my residential ISP rotated a dynamic IP address to my router that was previously used in those malicious attacks, or it's a shared node.

    I will force an IP change on my router to get away from the flagged address. If there is any temporary block tied specifically to my Zotero account username because of this IP coincidence, could you please clear it?

    Thanks again for keeping the ecosystem secure,
    Simon
  • simonstjohn
    Hi Dan

    Just wondering if you've had a chance to consider if there is any temporary block tied specifically to my Zotero account username because of this IP coincidence, could you please clear it?
  • dstillman Zotero Team
    No. Why do you think that?
  • simonstjohn
    You mentioned in your message 12 days ago there was a block on my account and I have not been able to access the API since.

    That's why I asked If there is any temporary block tied specifically to my Zotero account or API access if you would be kind enough to please clear it?

    Thanks Dan for your kind assistance.

    Simon
  • dstillman Zotero Team
    edited 15 days ago
    I didn't say there was a block on your account. I said your IP address was automatically blocked due attacks from it within the preceding 24 hours.

    Without further attacks, the block would've been lifted automatically.

    I'm not seeing any recent blocked requests from your IP address, and there have been successful requests from Pyzotero and Zotero 9, so again, I'm not sure why you think you're blocked. If you think you are, send full request/response headers (without API key) to support@zotero.org with a link to this thread.
Sign In or Register to comment.