Unfortunately not.
As the documentation is currently not very good, I’m not sure whether to use “token” or “app-key” or …
I tried it on a different installation and called directly in a browser something like this:
https://…/api/content/item/Artikelcollection?app-key=API-xxx
Permission denied :-/
When activating a role within “Public API access permissions for unauthenticated requests.” I get a result, but that is not my aim.