You don’t need X-Auth-Key or X-Auth-Email header if you are using an API token. There is an issue with the docs about it
X-Auth-Key
X-Auth-Email