I've found the problem this morning.

In addition to the toml entry you also need to request API access for the app via the partners.shopify dashboard.

Navigate to

apps > [YOUR APP] > API access

and under 'Allow network access in checkout UI extensions, click Allow network access' you need to select 'Request Access'

With that updated I'm able to make API calls from my extension components