If the API you want to use is undocumented it's most likely a private API. I don't know the exact reason why it's like that and I can do some investigation into why that endpoint is closed off.
I believe you'll just need to rely on using the Collects and Smart Collections APIs at the moment.