As you probably have discovered, the Bitcoin Core on Umbrel does not expose Remote Procedure Calls (RPC), hence it does not accept RPC from an External Host.
In other words, any API call from an external host (e.g. your laptop) to the Bitcoin Core running on the Umbrel server will fail.
One simple workaround is using ssh tunneling.
You find a step by step guide at the following Google Doc:
Umbrel’s Bitcoin Core Remote Procedure Calls (RPC) with Local Port Forwarding