It's probably the incorrect value for admin token variable because you received an active rejection from the correct API URL. Compare the value with the zrok controller configuration file.
If that's not it, then audit the precise syntax and order of the admin command against the built-in usage hints to ensure you're sending legal opts and args. It looks correct to me at a glance.