My client has a front end website (NON SCA) but they are using the SCA Checkout and my account they want to be able to call the search API / Commerce APIs from their front end ? is this possible ? currently receiving CORS error as the blocker

Generally we don’t recommend this type of architecture for performance reasons, as well as the general difficulty of integrating / maintaining it. However, in cases where people have attempted this, you probably need to create your own API layer for any NetSuite APIs or services you want to call, using Suitelets. You can call the search API, for example, ‘internally’ by having the SuiteScript in the Suitelet handle the request/response, and then send it back to the user who called the Suitelet. I really must stress, however, that this is not something we recommend.

thanks @Steve Goldberg They are moving off SCA in a few months so its a short term solution that may make them happy - currently they use a Proxy solution and its not the greatest