Hi,
Could you please check if your documentation for HTTP endpoints is accurate in respect to the authorisation header? The docs (e.g. https://docs.inedo.com/docs/proget-api-packages-download) do mention X-Api-Key whilst what really works is X-ApiKey. It is tiny difference but caused me a lot of debugging until I downloade pgutil source code.
Cheers!
Maciej