• Invalid key: confirm key prefix and environment match (test vs live). • Expired/revoked key: rotate from Settings → API Keys and update secret store.
• Insufficient scopes: compare endpoint requirement with token scope list — see the Authentication guide for key types and recommended scopes.