If it works fine in Postman - you'll need to go back to AppGyver support.
CORs errors happen when you attempt to access one domain while using another. For example, let's say you have google.com open in your browser, and then your browser has some javascript that tries to open api.meraki.com - that will cause a CORS error.
api.meraki.com should be called by back end code only.