curl -X POST "https://app.cotool.ai/api/roles/:id/perms" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"toAdd":[{"resource":{"type":"all"},"action":"agent.create"}],"toRemove":[{"resource":{"type":"all"},"action":"agent.create"}]}'

{
  "perms": [
    {
      "resource": {
        "type": "<string>"
      },
      "action": "<string>"
    }
  ]
}