After my last post, I did some more digging. I found that the API is actually documented at https://tccna.honeywell.com/WebApi/Help/ApiIntroduction

you need an APP ID to log in with (or OAuth app ID+secret).