Diagnosis: Invalid API key errors

Confirm you're using the key from the dashboard for the correct site, and that you haven't mixed up public (pk_live_...) and secret (sk_live_...) keys. For /v1/verify use the public key; for /v1/validate-token use the secret key. Rotate keys in the dashboard if you suspect exposure.