Either a v1 admin/notification API token, or a v2 access token with send_notification scope. When left empty, the token specified in the global configuration will be used. The type of the token depends on whether v2 API has been enabled in the global configuration.