Getting private messages for a third-party

Hi!   I'm trying to hook up to a site built on Lithium as a third-party, and we'd like to display private messages for users. As per the docs, I'm hitting  <base endpoint>/2.0/<tenant id>/search?q...