Yes, using windows auth and have set all verbs. It looks like a permissions issue as our intrastructure guys have made me an admin on the server and it all works.
I now need to work out what permissions are required on the api dir (probably read and execute?) so I don't have to made everyone an admin.
Thanks