What does the "Secret API keys should not be used in your app." error mean?

If you get a 403 error status, “Secret API keys should not be used in your app.” error message, or “7243” error code when making HTTP requests to the RevenueCat API, you are probably using the wrong API key, or using a private API key when you should be using a public API key.

Double-check for any typos and make sure the API key matches the one in your dashboard.

The following RevenueCat REST API endpoints require using a public API key:

• GET /subscribers
• POST /attributes
• POST /attribution
• GET /offerings
• POST /receipts

You can find your public API key by following this guide: https://docs.revenuecat.com/docs/authentication#obtaining-api-keys Make sure to use the correct public API key - for example, if you're sending an iOS receipt to RevenueCat using POST /receipts, use the public API key for your iOS app (which will look like appl_xxxxxx).