I struggled with this also until I realised that I wasn’t properly formatting the authoristion bearer heading.
In my case I was using Replit and the entry should have been:
{{OPEN_API_KEY}}
I’d left out the brackets and got the same message you’re getting.
So, check the format of your authorization statement.