Indeed, if I remove the personalization of the administration URL, it works. But that removes the point of using this plugin.
For the JSON, I did a test, but that didn’t solve anything.
My site is hosted by Planet Hoster, but I doubt I can touch the firewall on the server side.