Api request form link is wrong

If your code runs on your server, you can use an app access token. Which doesn’t represent a user and you can make it using your ClientID + Secret.

Your Server does the lookup and passes the number to the display