Account Email: dshaver@phillipsinc.com
Account ID: d85e3315-0971-4ce1-9eb2-e79cc31575d6

Original account ID before reregistering to attempt a fix: 1a48deba-43bd-4a28-b2f0-2d486c3556af

I have confirmed my API key is correct and also registered for a new API key to see if a new key would allow requests.

Endpoints attempted with GET requests:
With x-api-key header:
https://api.gsa.gov/travel/perdiem/v2/rates/conus/lodging/2026
https://api.gsa.gov/travel/perdiem/v2/rates/conus/lodging/2025
https://api.gsa.gov/travel/perdiem/v2/rates/conus/zipcodes/2026
https://api.gsa.gov/travel/perdiem/v2/rates/conus/zipcodes/2025
https://api.gsa.gov/travel/perdiem/v2/rates/state/TN/year/2025
https://api.gsa.gov/travel/perdiem/v2/rates/state/TN/year/2026

With query param:
https://api.gsa.gov/travel/perdiem/v2/rates/conus/lodging/2026?api_key=MyKey
https://api.gsa.gov/travel/perdiem/v2/rates/conus/lodging/2025?api_key=MyKey
https://api.gsa.gov/travel/perdiem/v2/rates/conus/zipcodes/2026?api_key=MyKey
https://api.gsa.gov/travel/perdiem/v2/rates/conus/zipcodes/2025?api_key=MyKey
https://api.gsa.gov/travel/perdiem/v2/rates/state/TN/year/2025?api_key=MyKey
https://api.gsa.gov/travel/perdiem/v2/rates/state/TN/year/2026?api_key=MyKey

Error:
``
`403 Forbidden`
``
`

403 Forbidden

This error is repeated for all the above endpoints with the header or query parameter

Start by reproducing the listed Per Diem requests, beginning with one CONUS lodging endpoint, using both the x-api-key header and api_key query parameter. Compare the repeated nginx 403 response across endpoints and authentication methods; done means identifying the API-side cause or documenting the correct resolution for valid keys.

Written by the indexing model from the issue text.