@mint @PurpCat @creamqueen @phnt @mintplague @p @nyanide Just looked and I accidentally had restrict_unauthenticated checked for local activities - it's turned off now. I probably had the sense not to check it initially when the creamqueen incident first occurred and I was locking down the API but then later thought it got accidentally unchecked during an update and rechecked it. It wasn't intentional. Sorry for replying late to this thread, been quite busy lately.