I had the same error… but I did not have to lift restrictions to fix it. Instead, I added one. Under website restrictions I only had the URL ending with ‘wp-admin/options-general.php?page=pgc’ which gives API permission to the plugin’s settings. I simply added my home page as a second item under Website restrictions and so the PAGE that is accessing the calendar also has permission. I hope this helps!