Read the redirect-URL allowlist for the current account + environment
Returns the redirect URLs registered for your account in the
environment of the API key used to call this endpoint (sandbox or
live). Empty list means “no allowlist row configured” — any
subsequent /connections/initiate carrying a redirect_url
returns 400.
Scoped to (customer_id, environment) so a sandbox key only sees
the sandbox row.
Authorizations
Pass your secret key in the Authorization header as a Bearer
token: Authorization: Bearer sk_test_... (sandbox) or
Bearer sk_live_... (production).
Keys are created in the developer portal and the plaintext secret is shown exactly once at creation. Treat them like passwords — never embed them in mobile apps or front-end code.
