Trying requests requires sign-in. This reference is public, but the /api/* endpoints remain protected by Cloudflare Access. Unauthenticated calls are blocked; any request that reaches the Worker without a valid Access JWT returns 403 Forbidden.