curl --request POST \
  --url https://app.cotool.ai/api/roles/{id}/perms \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "toAdd": [
    {
      "resource": {
        "type": "all"
      },
      "action": "agent.create"
    }
  ],
  "toRemove": [
    {
      "resource": {
        "type": "all"
      },
      "action": "agent.create"
    }
  ]
}'

{
  "perms": [
    {
      "resource": {
        "type": "all"
      },
      "action": "agent.create"
    }
  ]
}