Hm wonder if it’s got auth. Can you hit it with a schema query?

{
  __schema {
    types {
      name
    }
  }
}