That used to be true. Now it speaks something called LEAP, which is a kind of JSON-based quasi-HTTP protocol over TLS. There is a python implementation (pylutron-caseta) and a javascript implementation (lutron-leap-js, which I wrote).