A URL is enough. For special cases, a few options stay within reach.
HTTP authentication
A password-protected website? Enter a username and password (Basic) or a token (Bearer). They are encrypted and never shown again.
Certificate
Certificate verification can be turned off for a test website.