import { createAdminClient } from '@spree/admin-sdk'

const client = createAdminClient({
  baseUrl: 'https://your-store.com',
  secretKey: 'sk_xxx',
})

const key = await client.apiKeys.create({
  name: 'Backend integration',
  key_type: 'secret',
  scopes: ['read_orders', 'write_orders'],
})

// `key.plaintext_token` is available only on this response.

spree api post /api_keys -d '{"name":"Backend integration","key_type":"secret","scopes":["read_orders","write_orders"]}'

{
  "id": "key_VqXmZF31wY",
  "name": "CI key",
  "key_type": "secret",
  "token_prefix": "sk_kCkDUvba1",
  "scopes": [
    "read_orders"
  ],
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z",
  "revoked_at": null,
  "last_used_at": null,
  "channel_id": null,
  "plaintext_token": "sk_kCkDUvba1Z9gf8HAy29ih1Bj",
  "created_by_email": "estella@okon.us",
  "created_by_type": "admin_user",
  "created_by_label": "Mana Cremin"
}

{
  "error": {
    "code": "validation_error",
    "message": "Name can't be blank and Scopes can't be blank",
    "details": {
      "name": [
        {
          "code": "blank",
          "message": "can't be blank",
          "specific": false
        }
      ],
      "scopes": [
        {
          "code": "blank",
          "message": "can't be blank",
          "specific": false
        }
      ]
    }
  }
}