Of course, note that I have filtered out the API key and the subdomain
"https://xxxxxxx.preview.workfront.com/attask/api/v10.0/project/search?apiKey=xxxxxx"
(I have tested this on preview, test, and production, all to the same effect) If you don't mind me asking, what technology are you using for ...