HTTP 403

Browser origin not allowed

A request sent from a browser came from an origin the key does not permit.

"type": "https://ohlc.io/problems/origin-not-allowed"

Why it happens

The key is not browser-enabled.
The page's origin is not on the key's allowed origins.
A server-side client sent an Origin header naming a site other than api.ohlc.io.

Call the API from your server instead of the browser, with no Origin header (one naming api.ohlc.io also counts as none).
Or enable browser use on the key and add the exact origin. See authentication.