// Send-only key for your application
const sendOnlyKey = await lettr.apiKeys.create({
  name: 'App Send Only',
  permissions: ['emails:send']
});

// Read-only key for analytics dashboard
const analyticsKey = await lettr.apiKeys.create({
  name: 'Analytics Dashboard',
  permissions: ['emails:read', 'emails:list', 'analytics:read']
});

// Full access for admin operations
const adminKey = await lettr.apiKeys.create({
  name: 'Admin Key',
  permissions: ['*'] // All permissions
});

const key = await lettr.apiKeys.create({
  name: 'Marketing Only',
  permissions: ['emails:send'],
  domainRestrictions: ['marketing.example.com']
});

// This key can only send from marketing.example.com

const key = await lettr.apiKeys.create({
  name: 'Production Server',
  permissions: ['emails:send', 'emails:read'],
  ipRestrictions: [
    '203.0.113.50',      // Single IP
    '198.51.100.0/24'    // CIDR range
  ]
});

const key = await lettr.apiKeys.create({
  name: 'Limited Key',
  permissions: ['emails:send'],
  rateLimit: {
    requests: 100,
    period: 'minute'
  }
});

const key = await lettr.apiKeys.get('key_123');

console.log({
  permissions: key.permissions,
  domainRestrictions: key.domainRestrictions,
  ipRestrictions: key.ipRestrictions,
  rateLimit: key.rateLimit
});

{
  "error": {
    "code": "forbidden",
    "message": "API key lacks required permission: emails:send"
  }
}