Can I use the API key/script on a non-authorized website?

No. For the script to be functional the website that is using the script has to be listed as an Authorized Website on the Authenticity dashboard. If you’ve added the API key/script to a recently Authorized Website, it may take a short while (no more than 10 minutes) before it is updated and considered as active.