Imports can be executed directly in the ExpressionEngine control panel, or by requesting the Import URL. Note that the Import URL does not require the user to be logged in to execute. Therefore, if a random user discovers your Import URL, they can run a import for you without you knowing! For this reason, it is recommended to use a passkey, which you can set when configuring the import.