Simple answer is NO.
You can't call any endpoint (different origin) without server's permission.
ok! I got it. But why? How it works ?
It's called CORS (Cross-Origin Resource Sharing). In one line, it is a browser security . Browser blocks you to prevent such request.
Ok! but how browers knows that I don't have the permission or I'm cheating. :D
Well, if you check Network Tab of a browser, browser sends one more request to server (before actual request) with OPTION
method. In the response of the request, server tells to browers if it's valid request or not.
For more details, Read MDN https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS