I have reviewed other posts regarding 401 errors, but none of them seem to match my issue, and all are from a year or more ago too.
I am using the C# example:

I am substituting in a private API key with Full Access permissions, in order to call https://a.klaviyo.com/api/events/
Eg

However I still get a 401 response.
I’m wondering if, for example, the API restricts access to just the domain of the account. I ask because when testing locally both my testing account key and the live key for our client both return authentication errors.
The calls are being made (I believe) as per the documented examples from https://developers.klaviyo.com/en/reference/create_event
They seem to be succeeding from a payload and URL/endpoint perspective etc, but then get an unauthorised response which seems to indicate they are good calls but not allowed.
As the processing and handling “seems” to be fine (without being a naïve developer) I wanted to check if there was additional security protocols that could be impeding the successful call completion. If necessary I can arrange to test in production in order to be within the domain etc, but this is obviously a last resort.