DEFAULT Profile, sending a request using List Profiles will always return a result, assuming the funding:read_profile scope was included when adding scopes to the client.
Include the access token from the authentication request in the authorization header.
Sandbox
Production
?order=ASC&order_by=CREATED_AT parameters ensures the DEFAULT Profile is first in the list.