Looks like no authentication is required for this endpoint. all you need is clientid which isn’t secret since client id is part of the url when installing an extension.
