To call your API from a regular web application, the application must pass the retrieved Access Token as a Bearer token in the Authorization header of your HTTP request.
curl 'https://global.unless.com/api/v1/contacts?accountId=YOUR_ACCOUNT_ID&websiteId=YOUR_WEBSITE_ID' -H 'authorization: Bearer YOUR_ACCESS_TOKEN'