Generate a merchant auth token

Creates a new merchant API auth token for the authenticated site. `sid` is injected from the bearer token (not accepted from the client). **Request body (JSON):** `name` (required), optional `description`, `duration_hours`, `scopes`. Provide `scopes` (from GET auth-tokens/scopes) to restrict the token; omit for full access. **Authentication errors:** Authentication can return codes `1000`-`1008` for client IP, token, site, whitelist, signature, session, or token scope validation. See [Authentication](/docs/authentication) and [Error codes](/docs/error-codes).

Signing up takes about a minute and comes with a sandbox site and test API keys.