Hacker News Reader

The link contains the needed keys. It's explained in their FAQ.

If the link contains the keys, does that mean the server can also see these keys?

Nope, the secret is in the url fragment. Of course this means you need to trust that they do not change the JS code so that it steaks your keys.