A shared request collection can help someone reproduce an issue quickly. It also needs a clear separation between the request itself and private credentials.
What would you check before rolling out a tool? How would you share a useful example without sending account access along with it?