Admin password required.
Set QR_ADMIN_PASSWORD in the deployment environment. The page does not expose inventory data until authenticated.