Before you send anything real: reproduce the worked HMAC
signature in the Authentication section below. An HMAC implemented
slightly differently is the single most common way an integration like this
loses a day, and the published test vector will tell you in five minutes.
“Try it out” will not work from this page. Every request
must carry a signature computed over the exact bytes being sent, which a
browser form cannot do — use the reference client instead.