Or is the way to add a token to the header object within the playground?

You can also pass in the token in the Authorization header manually in the Playground (that's what the buttons in the console actually do)

Where do I get the token? Is it just the root-token?

yea