من يمكنه فعل ماذا.
محدد بوضوح.

const response = await fetch(
  'https://api.sendseven.com/api/v1/permissions/me/scopes',
  {
    headers: {
      'Authorization': 'Bearer YOUR_API_TOKEN',
      'X-Tenant-ID': 'YOUR_TENANT_ID'
    }
  }
);

const scopes = await response.json();
console.log('My scopes:', scopes);

const response = await fetch('https://api.sendseven.com/api/v1/api-tokens', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer YOUR_JWT_TOKEN',
    'X-Tenant-ID': 'YOUR_TENANT_ID',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    name: 'CRM Integration Token',
    scopes: ['contacts:read', 'contacts:write', 'conversations:read'],
    expires_at: null // Never expires
  })
});

const token = await response.json();
console.log('Token (save this!):', token.token);
// Returns: s7_api_a1b2c3d4e5f6...