Key doesn't allow origin 'https://dashboard.vapi.a...
# support
j
This is when testing the assistant made on the dashboard by clicking "Talk to Assistant". I already went to the Vapi API keys page and deleted the default Public and Private keys, made new ones, and added the origin url https://dashboard.vapi.ai but it still wont work. https://cdn.discordapp.com/attachments/1421874701386649793/1421874701961265253/Screenshot_2025-09-29_000102.png?ex=68da9f82&is=68d94e02&hm=5eab282f43169075a03e1be17355a83d3cc37a7264cbaffc47c9924223ef1444&
c
Hi there, Thank you for your message. Our team is currently out of the office. We operate Monday through Friday, from 9:00 AM to 8:00 PM Pacific Standard Time (PST). We’ll get back to you as soon as possible during our normal business hours. If your message is urgent, please mark it accordingly or include “URGENT” in the subject line, and we’ll do our best to respond promptly. Warm regards, Vapi Customer Support Team
v
It sounds like your API key may not be set as a public key or the allowed origin is not configured exactly as required. To fix this, ensure you create a public API key and add the allowed origin as exactly
https://dashboard.vapi.ai
(no trailing slash or typos). Example setup in the Vapi dashboard:
Copy code
Allowed Origins: https://dashboard.vapi.ai
Key Type: Public
After saving, use this public key for dashboard testing. If you still see the error, try regenerating the key and double-check the origin spelling. Source: - [JWT Authentication Vapi Docs](https://docs.vapi.ai/customization/jwt-authentication)
j
Ok, so I've removed all previous keys including the private keys, created a new Public Key only adding in exactly
https://dashboard.vapi.ai
for the allowed URL (changed/added nothing else), and now it's showing the error "Invalid Key. Hot tip, you may be using the private key instead of the public key, or vice versa." https://cdn.discordapp.com/attachments/1421874701386649793/1421876852074479637/image.png?ex=68daa182&is=68d95002&hm=72e00619134bee8c3aa6f9c4d419b7aaaa5e068309f85b5c0718633327e5cb75&
It seems like it's a propagation issue. Error resolves itself after deleting browser cache and a forced page refresh; using the additional Public API key specifically allowed for only
https://dashboard.vapi.ai
c
You shouldn't have to specify the origin for the new API keys. Just leave everything blank
5 Views