Answer
This was a confirmed bug in Bearer-authentication handling for event actions, fixed by a specific patch available from UPD13 onward — if you hit exactly these array/string index exceptions when switching an event action's Authentication Method to Bearer, this is very likely the known defect rather than a formatting mistake in your API key value; check whether your environment already has the relevant fix applied before spending more time adjusting the key format.