For owned tokens without a linked project. No request fields. Once authorized, this token cannot become a remix; linked projects use their remix-signature endpoint.