Hi @alexfeel,
Nope, it’s not a bug. You gotta use the correct supported key. It might help to find one via suggestion feature. This list shows frequently used keys for short only.
About the reason why you used ‘X-API-Key’ and the request was sent successfully by curl, I guess that curl automatically convert the key to lowercase.