The `restrictSources` of API keys should be typed as: - a comma-separated string This parameter does **not** support array of strings as a valid type.