# Auth and Permission Issues

Diagnose invalid keys, scope mismatches, and token lifecycle issues.

<!-- docs-source -->
Source: https://learning.monetizekit.app/docs/troubleshooting/auth-issues
<!-- /docs-source -->

• Invalid key: confirm key prefix and environment match (test vs live). • Expired/revoked key: rotate from Settings → API Keys and update secret store.

• Insufficient scopes: compare endpoint requirement with token scope list — see the [Authentication guide](/docs/getting-started/authentication) for key types and recommended scopes.