Missing the word 'bearer' in Authorization header.
-- header 'Authorization: bearer <YOUR_PRIVATE_INTEGRATION_TOKEN>'
non experienced developers will miss this.
After that my API calls started giving 200.