Hey Haley,
Thank you — please pass the following to your host’s System Administration team.
Endpoint. Validation is a plain outbound HTTPS GET from your web server to:
https://theme.co/api-v2/validate/{purchase-code}/?product={product}&siteurl={your-site-url}
Updates use the same host: https://theme.co/api-v2/packages/{key}/
Both are GET requests issued through WordPress’s HTTP API, 15 second timeout, port 443. There is no callback to your server and no fixed source IP on our side — the request originates from your own web server’s address. Only outbound HTTPS to theme.co needs to be permitted.
Please also confirm: outbound requests to theme.co are allowed, cURL is enabled, allow_url_fopen is enabled, and CA root certificates are up to date. Outdated certificates cause the request to fail silently, which matches “nothing happens”.
Quick Check
Troubleshooting
-
Get the exact error – append &x-verbose=1 to the URL of the validation screen and retry. This reveals the server-side error and status code your host has asked for. Please post what it returns.
-
Test from the server – ask your host to run curl -v https://theme.co/api-v2/validate/ on the web server itself. This shows whether the request is refused, times out or completes, along with the addresses involved.
-
Confirm the registered URL matches exactly – a difference in www or non-www, or http versus https, causes validation to fail even when the connection is fine.
Recommended Resources
Hope this helps.