401 unauthorized on bad request

[impactcolor]

I'm following the documentation found here

I'm attemping to add a category based on the docs. Here is my attempt:
`import 'dotenv/config';
import axios from 'axios';

const url = new URL(
"https://api.chec.io/v1/categories"
);

const headers = {
"X-Authorization": ${process.env.COMMERCE_SECRET},
"Content-Type": "application/json",
"Accept": "application/json",
};

function postDetails() {
const body = {
slug: 'test slug',
name: 'testCat'
}

axios.post(url, JSON.stringify(body), headers)
.then(response => {
    console.log(response);
})
.catch(err => {
    console.error(err);
})

}

postDetails();`

I get the a 401 on my response
I'm executing this from a local node js file. I added http://localhost to the Cross-Origin Resource Sharing (CORS) origins on the dashboard. I've also tried both my secret and public key types. Any idea what I'm doing wrong?