Within the campaign, go to the API Access & Security section and add a rule to the access control list (ACL) in the form of the domain path of your demo. This ACL rule grants API access to campaign data ONLY from this URL. Use the wildcard character “*” to grant access to all files and folders beneath the specified path.
For example, if your demo will be placed in the demo folder of your website (and you chose path-based URL format), add this ACL rule:
Give the ACL rule a descriptive name.
The ACL rules must match the URL formats that you set above. Keep in mind that you’ll need to create separate rules for both www and non-www, if you plan to use both.