Always test new commands on a non-critical camera first, and never expose the API raw to the internet.
For GET commands, simply type the URL into your browser: agentdvr api