I'm afraid that's a solution more will go for to circumvent UA blocking.

Thanks for your response @ssingh, I understand why you're hesitant to add exceptions.

Thanks. I'm aware of the discussion on companies scraping the wiki infra, and the value of Wikipedia, and I think this is an important discussion to have. This is however the blocking of the end user, something I can't help but notice is the direct opposite of the Wikimedia Foundation's vision: "Imagine a world in which every single human being can freely share in the sum of all knowledge. That’s our commitment."

Thank you all for your help, we're no longer blocked from using the Wikidata API, our initial issue is resolved.

Yes we have a static address.

Woah, great find! That looks like it's the problem yeah.

The server is running in the Hetzner Falkenstein datacenter in Germany.

IPv4: 148.251.131.144
IPv6: 2a01:4f8:210:30ce::2

Here's the relevant debug logs from both production and development. They include the request body, and (expired) tokens.

Can you confirm the edits coming from your production server are actually correctly logged in/sending the expected tokens?