Keep getting "Forbidden" status trying to call the API

Yeah that’ll do it

Err it does, you just have to use the ID of the user not the users login.

The screenshots I used above are a bad example as I used my own ID in both.

So Practical example:

You want to test that a message of Hello World! from noylraCyrraB that is to be tested against the AutoMod on channel barrycarlyon

The URL is

https://api.twitch.tv/helix/moderation/enforcements/status?broadcaster_id=15185913

And the headers contain a token for 15185913

And the JSON POST body is

{
  "data": [
    {
      "msg_id": "cat",
      "msg_text": "Hello World!",
      "user_id": "61788418"
    }
}

As a message from the broadcaster in the broadcasters own channel will always pass automod.