Please pass access_token with every request in header section param as Authorization: Bearer access_token.
{
"Accept": "application/json",
"Content-Type": "application/json",
"Authorization": "Bearer c16e2ecc2b3c8dd685b08c7f601f0609",
}