When making a curl request the authentication token should be passed in the request's header. Passing it as a regular parameter will likely result to the "Error: The requested method is not allowed ... Method must come from a white-listed IP address or provide an auth token."