Due to a security issue,[1] the deprecated "gettoken" parameter to action=block and action=unblock has been removed. Clients should use action=tokens to fetch tokens of types "block" or "unblock" instead. This also applies to the security release 1.21.2. [1]: https://bugzilla.wikimedia.org/show_bug.cgi?id=49090 -- Brad Jorsch (Anomie) Software Engineer Wikimedia Foundation