For anyone who stumbles across this the correct endpoint to use is.
/api/auth/email-confirmation?confirmation=CODE
Note that this will also try to redirect you so if you don’t have a valid redirection URL set you will get a 404 response.
Just starting out with Strapi. Glad to see an effort is being made to improve the documentation. It is definitely challenging to follow.