curl -X GET https://api.sendgrid.com/v3/verified_senders -H "Authorization: Bearer $SENDGRID_API_KEY"

Shows the sender identities and domains that have passed SendGrid's verification, which is what lets you send as me@example.com. A missing entry here causes 403 Forbidden on mail/send. Verify new senders via the dashboard or the senders endpoint.