You do not, but depending on the service call you will probably need some sort of authentication. HTTP Basic works on practically every service (except /extprops), so that is the easiest way to test end-to-end connectivity.
What service are you calling and what operation? Sounds like this might be related to:
If so, let's consolidate this thread into that one, as I have escalating the conversation internally.