However one caveat is that public suitelets only work if the user agent matches a browser. The way around this is a small piece of middleware (I've used a Google Cloud function) to proxy the requests