In my org am using the Twilio web application and cleared the security review using checkmark and when submitted I received an email to verify the Twilio using either chimera or zap.
If your app integrates with the https://api.twilio.com endpoint, please confirm and provide Web Application scan results (from either ZAP, Chimera, or Burp), along with API documentation (e.g. sample HTTP request and response (for all header values).
Before starting a scan, you must configure your site to prove that you are the owner. Chimera can only be used to scan web applications that you own or develop. To do this, click on "Download Token" to download your abuse prevention token. Follow the directions on that page to upload the token to your domain. If you are absolutely unable to upload the token to your server, please contact us using the address on the download token page. We will grant exceptions in very rare circumstances.
Am scanning web application (Twilio) how am I supposed to add token.
This is the chimera scan required credentials. Is that correct what I have entered
What is the step by step process to test the web-application detailed information will be helpful.