The bearer token needs to be pass in format 'Authorization: Bearer {token}. Refer to the note: How to invoke a REST API from PL/SQL package UTL_HTTP using bearer access token? (Doc ID 2972870.1)