Do I need to encrypt an Apple Music API JWT token?

I've used JWT before but first time with the Apple Music API. I put together a JWT from jwt.io with the ES256 algorithm and running it through Postman or curl, I get a generic 500 error with "An unexpected error occurred".

Reading back through the documentation, I read, "After you create the token, sign it with your MusicKit private key. Then encrypt the token using the Elliptic Curve Digital Signature Algorithm (ECDSA) with the P-256 curve and the SHA-256 hash algorithm."

I haven't seen much about encrypting the token in any other posts. Do I need to sign the token and then encrypt the whole thing?

Thanks!