This page calls the API directly from your browser: it requests a short-lived token, then posts one synthetic event to /v1/webhook. Both cross-origin requests exercise CORS.
Test data only: the webhook labels events PROD. If CORS is misconfigured, inspect DevTools Console and Network for the blocked OPTIONS preflight and its response headers.