As part of our security measures, we allow only trusted sources to access our API. To ensure that, we require our clients to have their IPs or Domains whitelisted with us so that they can access our API endpoints. Please note that you can whitelist either your IPs or domains and not both.
IPs or Domains whitelist is optional in the Sandbox region. You can manually enable them in the Sandbox region inside the console site under Settings.