Requests run straight from your browser — keys are never sent through third-party proxies. Experiment with a sk_test_… sandbox key, not a production key.
sk_test_…