The backend wants a device key. Paste it once; it stays on this phone and goes with every request as X-Hearth-Key.
X-Hearth-Key
It's the HEARTH_DEVICE_KEY the backend was started with, the same one the Kiln uses.
HEARTH_DEVICE_KEY
Hearth needs JavaScript to show your numbers.