Do I have to include https://?

No. A domain such as www.example.com is enough. TabOnly adds https:// when the scheme is missing. Only http and https are stored. An address with a username or password is refused, and the host needs a dot, or it can be localhost.