The common way is to configure an RCI (API) proxy with Basic authorization.
Then use your browser to catch API requests.
For example:
{"show":{"ip":{"hotspot":{"summary":{"attribute":"sumbytes","count":5,"detail":0}}}}}
The above shows your top-5 stats. Change the "detail" to 1, 2, or 3 to address the other RRD sets.
Another useful request would be:
{"show":{"ip":{"hotspot":{"chart":{"items":"08:3a:88:aa:bb:cc,b2:9e:82:dd:ee:ff,unregistered,10:bf:48:11:22:33,others,multicast","detail":1,"attributes":"rxbytes,txbytes"}}}}}