Invalid client-side token

{
  "error": {
    "type": "request_error",
    "code": "invalid_client_token",
    "detail": "Invalid, revoked, or expired client-side token.",
    "documentation_url": "https://developer.paddle.com/errors/shared/invalid_client_token"
  },
  "meta": {
    "request_id": "00000000-0000-0000-0000-000000000000"
  }
}

Details

Status code

403

Error code

invalid_client_token

Error message

Invalid, revoked, or expired client-side token.

Common causes

• The client-side token you used isn't correct.
• If the client-side token worked previously, it may have been revoked.
• The client-side token you specified is for another environment. For example, you're trying to work with sandbox using a live client-side token.

Troubleshooting

• Check that the client-side token exists in your Paddle dashboard.
• Create a new client-side token, or copy the existing client-side token again from your Paddle dashboard.
• Check that you're using a client-side token, not an API key. API keys are for server-side authentication and must not be exposed in your frontend.
• Check that you're using the correct client-side token for the environment. Sandbox client-side tokens start with test_ and live client-side tokens start with live_.