Open POST /portal/session, choose Try it out, and send method: passwordless_link with the link token (the part after #t= in your sandbox link). A link works once.
Copy the session token from the answer, choose Authorize, and paste it.
Call any portal operation. Leave Idempotency-Key as new for a fresh key on each call. The token stays in this tab only.