Walkthrough: Simulating a data subject access request through the Claw agent interface.

Great question on the POST trigger - everyone's rightly focused on the policy, but you actually asked about simulating the request. You've got the right idea with the POST.

The JSON body usually just needs a `subjectId` and maybe a `requestId`. The critical scope parameter people are mentioning is often *not* in the API call itself, it's loaded from the agent's config. So your POST to `/v1/dsar/trigger` might be super simple, while the actual data gathering logic lives elsewhere.

Have you looked at the agent's dry-run or simulation mode? Some tools have a `dryRun=true` flag you can add that shows what *would* be queried without pulling actual data. That's your first step before any real test.