You need to use the insecure transport when initializing your client, it's a grpc dialer option, here is an example from our CLI zed: https://github.com/authzed/zed/blob/main/internal/client/client.go#L101