curl -X POST https://api.liddie.io/api/v1/api-keys \
  -H "Authorization: Bearer <dashboard JWT>" \
  -H "Content-Type: application/json" \
  -d '{
    "label": "backend-prod",
    "permissions": ["payments:create"],
    "totpCode": "123456"
  }'

// Dashboard-session endpoint: send the JWT as a Bearer token.
const response = await fetch('https://api.liddie.io/api/v1/api-keys', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer <dashboard JWT>',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    label: 'backend-prod',
    permissions: ['payments:create'],
    totpCode: '123456',
  }),
});
const key = await response.json();

{
  "id": "<keyId>",
  "rawKey": "lid_live_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
  "label": "backend-prod",
  "permissions": ["payments:create"],
  "expiresAt": null,
  "message": "Store the rawKey securely. It will not be shown again."
}