Authorization: Bearer <portal_jwt>.
Request body
url must be an absolute URL and can be up to 2,000 characters. It must be
publicly reachable over HTTPS in production.
Response
signing_secret before continuing. It is returned only by this
endpoint and cannot be recovered, read, or changed later. See
Portal and webhooks for delivery verification.
