Paste your x-game-token and user GUID. They're sent only to gamesapi.worldsurfleague.com from your browser.
x-game-token
gamesapi.worldsurfleague.com
Open fantasy.worldsurfleague.com while logged in, then open DevTools → Application → Local Storage. Read the wsl-game-token entry, copy game_session_token into the JWT field, and copy guid into the GUID field. For brackets, copy the userToken entry's value into the bracket token field.
wsl-game-token
game_session_token
guid
userToken