Requests run from this app's server. Do not send secrets you would not trust to a shared tool. Third-party URLs (e.g. httpbin) may change or rate-limit; use your own webhook URL for production tests.