no, not strictly, for `--from-pr` only download the diff + patches files is required, which doesn't require authorised API access (it does help in avoiding rate limiting though)