const apiKey = await app.createApiKey({{
  name: 'Production Webhook Handler',
  scopes: ['webhooks:write', 'events:read'],
  expiresIn: '90d',
  ipWhitelist: ['192.168.1.0/24'],
  rateLimit: {{
    requests: 1000,
    window: '1h'
  }}
}});

console.log(apiKey.key); // ak_live_1234567890abcdef
console.log(apiKey.id);  // key_abc123

// That's it. You're done. Go grab a coffee.

// Header-based auth (recommended)
curl -H "X-API-Key: ak_live_1234567890abcdef" \
     https://api.yourapp.com/webhooks

// Bearer token format
curl -H "Authorization: Bearer ak_live_1234567890abcdef" \
     https://api.yourapp.com/data

// Query parameter (for legacy systems)
curl "https://api.yourapp.com/events?api_key=ak_live_1234567890abcdef"

// We're flexible like yoga instructors who also code

// List all keys
const keys = await app.listApiKeys();

// Get key usage stats
const usage = await app.getKeyUsage(keyId, {{
  period: '7d'
}});

// Rotate a key
const newKey = await app.rotateApiKey(keyId);

// Revoke compromised key instantly
await app.revokeApiKey(keyId);

// Update key permissions
await app.updateApiKey(keyId, {{
  scopes: ['read:events', 'write:webhooks']
}});

// Get comprehensive analytics
const analytics = await app.getApiKeyAnalytics({{
  period: '30d',
  groupBy: 'day'
}});

console.log(analytics);
// {{
//   totalRequests: 1234567,
//   successRate: 99.8,
//   averageLatency: 45,
//   topKeys: [
//     {{ id: 'key_abc', requests: 50000, name: 'Production' }},
//     {{ id: 'key_def', requests: 30000, name: 'Staging' }}
//   ],
//   anomalies: [
//     {{ keyId: 'key_xyz', type: 'unusual_traffic', severity: 'high' }}
//   ]
// }}