All my reddit feeds as of yesterday were showing first Error 429 (API limit reached) now Error 404 (not found). If I manually paste one of these into a browser (example https://www.reddit.com/r/nvidia/hot/.rss ) it is able to load and shows content.
Short term is there a fix?
Long term:
Is newsblur still using the RSS directly or does it actually use the API access on the backend and access will be able to continue?
NewsBlur already uses Reddit’s authenticated API for subreddit feeds, even though the subscription URL still ends in .rss. I checked the server logs, and Reddit is currently rejecting API requests with 403 errors. NewsBlur is incorrectly displaying those failures as 404, which explains why the RSS URL can still work in your browser.
The earlier 429 errors indicate rate limiting. There isn’t a confirmed workaround yet, and using the API doesn’t guarantee continued access if Reddit changes its restrictions. You don’t need to change your subscription URLs.
@samuelclay any update here? Reddit subscriptions are still failing across the board.
I’m kinda liking many of my high-attention feeds going away, but only as a (hopefully) brief vacation. I am not prepared for their actual silencing, just yet.
Ok I’ve emailed them trying to figure out why we’re blocked, since I am using the API:
I’m Sam, the founder of NewsBlur (https://www.newsblur.com), an RSS reader. Our authenticated Reddit API requests are being rejected with HTTP 403 and the message “You’ve been blocked by network security.” That error page directed us to this support form.
Users reported failures by October 14, 2026, and we confirmed the block again on October 16. From an affected production worker, a GET to https://oauth.reddit.com/r/nvidia/hot?limit=1 with our existing OAuth bearer token returned HTTP 403 and a text/html block page. The worker’s verified public outbound IP is 65.21.5.225. Other unrelated subreddit requests also return 403.
NewsBlur uses OAuth app-only access with configured client credentials and a shared fleet-wide request limiter configured in code for 95 requests per minute by default. Our User-Agent is NewsBlur/1.0 (+https://www.newsblur.com). These are server-side authenticated API calls, so the browser login and VPN questions are not applicable.
Could you review the block, explain whether it applies to our IP or API application, and let us know what is needed to restore access?
I’m Tim, the developer of SubStory, an iOS app for browsing Reddit media. We’re seeing exactly the same block, so I’m adding our data points in case they help narrow it down.
Timeline: our OAuth requests started returning the “You’ve been blocked by network security” HTML page around 20:14 UTC on October 13. From October 14, anonymous requests to the public .json endpoints failed the same way.
What we see (retested October 17):
POST /api/v1/access_token still works. An app-only (installed_client) token comes back with a 200.
Every request to oauth.reddit.com with that token gets a 403 text/html block page with no x-ratelimit-* headers. It looks exactly like sending no token at all.
Anonymous www.reddit.com/r/<sub>/new.json and api.reddit.com get the same 403. old.reddit.com redirects them to /login/?reason=lor2. .rss gave us a 429.
Changing the User-Agent, the HTTP client (curl, Node, Bun, Python) or the token type makes no difference.
Why I don’t think it’s your IP: our requests come from users’ phones on home and mobile networks, plus my own home connection in Belgium. None of that has anything in common with your server, and we use a different client ID and User-Agent. We’re also nowhere near the limits: our median across all users is about 6 requests per minute. Two unrelated apps on unrelated networks got the same block on the same day, which looks like a Reddit-wide change for third-party API clients, not something either of us did.
We’ve also submitted a request through Reddit’s form. If either of us hears back, it would be great to share it here. I’ll post an update if I learn anything.
They are ending RSS in November, yes, but public API access wasn’t supposed to die until March and Feedly has a commercial API agreement which should have worked past March.
I would have hoped Newsblur had commercial access as well but don’t know if they do. Reddit doesn’t seem very interested in offering that to anyone anymore.
Thank you for writing in about Reddit, and I’m sorry to give you bad news. The Reddit integration has stopped working because Reddit ended the access it depended on, and it’s not looking good for it coming back. That’s why Reddit sources have stopped updating and why adding new ones or reconnecting doesn’t work. It’s not something on your end.
Hey @samuelclay I wonder if you can share if you’ve received any update from Reddit, especially if it’s along similar lines to what Feedly is experiencing.
Please don’t read this as complaining about the level of service/support here … I’m honestly not sure why this isn’t a bigger deal … not on newsblur only, but more broadly. I sort of assumed lots of RSS heads were following Reddit this way, and Reddit’s own app is basically impossible to use if you care about browsing staying on top of new reddit posts. Maybe I’m in a much smaller minority than I thought.
In any case, it was “news” when reddit announced RSS feeds were stopping, I’m surprised it’s not news when they break 3rd party access with no notice a month earlier. That being said, maybe I too misunderstand actual issue here, and it’s more narrow or convoluted than “3rd parties can’t get lists of new post links+titles”? Any clarity you can provide would be appreciated, if only so I can understand if there are any alternatives.
The Web feed can’t figure it out (yet). Maybe a feature can be pull that feed and split out the individual feeds? (Though ity would require a login, etc.