Their repo implies that network requests are subject to the same-origin policy, since it's in a browser after all. If you open up devtools you will probably see

Their repo implies that network requests are subject to the same-origin policy, since it's in a browser after all. If you open up devtools you will probably see complaints along those lines. In short: the endpoints you request need CORS enabled.