control:read scope.
List API keys
Query parameters
Response
Create an API key
Body
Valid scopes: see the scope table — it is the single list of what each scope grants.
Response (201)
data.plaintext is the full token. This is the only time it is returned. Copy it immediately — HASP stores only the hash.
Revoke an API key
404.