What to do with the Redirect URL with a Python Script?

API
2

basically yes.

if you want tokens from other people, then you need a thing that is web accessable (aka public) to those users.

oAuth requires a user to manually take steps to grant access between the user and your ClientID via a Web Browser.