Actually the issue was that I was sending the authentication twice.
First one was implied here:
const hubspotClient = new hubspot.Client({
accessToken: process.env.TicketConvoControl
});
So sending it as a header for searchResults was redundant and caused the 400 error.