Can't Verify API key on Envato Market Plugin


I recently installed Envato Market so I can do automatic updates and I am receiving this error after enabling the plugin and inputting the requested API token:

The OAuth Personal Token could not be verified. Please check that the Token has been entered correctly and has the minimum required permissions.

Additional Error Details:
Failed to query total number of items in API response.

Thanks for the help,

Hi @lassenswave,

This error typically means that the token you pasted into the plugin is incorrect, or that you created an app instead of a token. Please go back to and scroll all the way down to the bottom of the page. Look for the green button that says “Create a new token”:


On that page, make sure the following permissions are checked:

  • View and search Envato sites
  • Download the user’s purchased items
  • List purchases the user has made

Don’t select any other permissions than these three, or you’ll get another error.

Let us know how it goes. :slight_smile:


Yes I made sure to choose the following permissions it had asked for, as well I made sure that it was a token and not an app, I’ve tried numerous times and I am encountering the same error each time.

Can you verify that when you paste the token into the plugin’s settings, it doesn’t have any whitespace characters (like spaces or tabs) before or after the token?

Sometimes when you copy things from websites, your browser might add some extra spaces around it. The plugin currently doesn’t account for this and it will cause the error you describe.

Yes I can verify as well that there are no spaces at the beginning or end of the token. I thought maybe this could be a security or plugin issue, and after disabling all plugins I am still having the same error come up.

Heya @lassenswave!

Just make sure that your personal token looks like a long sequence of random characters (for example, c0lQ2WLYW9qAZ9RH12cH1fJPzVWSscXP).

Furthermore, if you are asked to enter a “confirmation URL” when creating your token at, then this is a sign that you’re in fact creating an app rather than a personal token, and you will receive the error in your original post as a result.

If none of the suggestions in this thread worked for you, I’d suggest that you open a Help ticket. Let them know that your personal token isn’t working in the Envato Market plugin, and include a) your personal token, b) the error you’re receiving from the plugin, and c) a link to this thread so they know what debugging steps you’ve already gone through.

You can open a ticket here:

The error ultimately suggests that somewhere along the line, your token is failing to authenticate you. But if you’re sure that the token is valid, was entered into the plugin correctly, and is in fact a personal token rather than an app, then support will need to look into where it’s failing.


Did you get anywhere with this? Having the same issue - cannot validate personal token (not app!). Getting exactly the same forbidden (403) error. Tried revoking and creating a new token, same.