It seems to work if you don’t add api. to the URL. It looks like there’s some kind of access restriction…