Ohh I see you are trying to do this from iOS Shortcuts:
I think the problem might be that you have put the api_key and api_username in the Headers field.
We don’t read normal api_keys and api_username out of the headers field, so I think your request is showing up as a non-authenticated user.
Are you able to put the api_key and api_username in the URL field?