You should use the “make it json safe” operator for this kind of stuff (you can access this in workflows, when you’ll use the API call)
And for the API first initiation call, you can do that manually using any “json url encoder” tool accessible through a web search