Thanks Brecht!
Also want to point this out. Seems that on the iOS Shortcuts it wasn't following the redirect. According to the documentation it is up to the client to follow the redirect.
Organizations
Retrieve the list of organizations for the API key specified in X-Cisco-Meraki-API-Key:
GET https://api.meraki.com/api/v0/organizations
Response code: 302Response: redirect to https://n123.meraki.com/api/v0/organizations
Note that the request is redirected to n123.meraki.com. A 302 may happen on any API call, including those that modify state such as DELETE, POST, and PUT. When a GET is redirected, the status code will be 302. When a non-GET is redirected, the status code will be 307 for Postman, or 308 for any other client. Client applications must follow these redirects. No action will be taken by the host issuing the redirect, so even non-idempotent requests are safe to retry on the new host.