Client side /me GET and CORS denial

I am testing the /me API with a Personal App using fetch(as per docs https://developers.akahu.nz/reference/get_me) but only receive a CORS denial as I assume localhost is not white listed.

My app and user tokens are correct as the API reference example works but running this locally does not work via Node Live Server. Have tried on a hosted environment with valid SSL and still get the same problem due to no domain white listing.

Am I missing a step here?