# `INVALID_PUBLISHABLE_KEY` (HTTP 401): the publishable key does not exist or was revoked

The pk_ key sent to the browser endpoint is unknown.

The browser endpoint POST /api/v1/email/public authenticates with a publishable key in the request body, not a bearer token. Publishable keys are created on the API keys page and stay visible there; revoking one stops its lookups immediately.

**What to do.** Check the key on the API keys page. The form widget reads it from its data-key attribute; a stale deploy is the usual cause.

```json
{
    "success": false,
    "error": {
        "code": "INVALID_PUBLISHABLE_KEY",
        "message": "That publishable key does not exist or was revoked.",
        "request_id": "req_01m1kgdm4xngzmbmff68g94w0c"
    }
}
```

Reference: https://spaw.co/docs/errors/INVALID_PUBLISHABLE_KEY