Ah, that would be it. Since you are making a request on behalf of a user, you have to provide a user access token. Right now the only endpoint that accepts an access token is the /entitlements/upload endpoint.
2 Likes