Troubleshooting unauthorized API error response

hi, i am trying to run some tests on this endpoint: https://api.poap.tech/event/{id}/qr-codes

but i keep getting unauthorized error response, what is the best way to troubleshoot this? fyi, testing done via https://documentation.poap.tech/reference/posteventqr-codes

I have API key, event id and secret code handy if that helps.

thanks!