It has no authentication support other than by an organization member that can log in. Listing threads is basically the key to eavesdropping on everything ever said in a platform using this endpoint.
If you are clever enough to get the Oauth2 token from the platform site, this will get the browser session token for you. list all orgs and projects, navigate them to list threads, etc…