As a security feature, AndDone only allows API calls from authorized domains to interact with our resources. For each environment, UAT and Production, AndDone will need to whitelist the domains or IPs that will be sent within your 
header. Please email integrations@anddone.com for whitelisting.
