CORS error with Lyft API endpoint

[alulsh]

The District Department of Transportation (DDOT) lists https://s3.amazonaws.com/lyft-lastmile-production-iad/lbs/dca/free_bike_status.json as a public API endpoint for Lyft scooters on its dockless API page. Lyft also lists this endpoint on their public FAQ for service in Washington, DC:

You can freely view this API endpoint in a web browser by visiting https://s3.amazonaws.com/lyft-lastmile-production-iad/lbs/dca/free_bike_status.json in a web browser:

Curl requests like curl "https://s3.amazonaws.com/lyft-lastmile-production-iad/lbs/dca/free_bike_status.json" | jq '.data.bikes[2]' also succeed with no issues:

When you try to hit this API endpoint with client-side JavaScript via fetch or XMLHttpRequest you receive a generic CORS error. As a result, this API is unusable for front end web applications.

Lyft does maintain developer documentation, but you must contact your Lyft Business contact for full access. Also, this developer portal appears to be for Lyft's traditional rideshare service, and not its micromobility services.