Try-it needs a Bearer token. Mint one with the client-credentials flow, then paste it into the Authentication panel.