Can't create cards?

I do a request like:

curl --request POST \
  --url https://api.supernotes.app/v1/cards \
  --header 'Api-Key: XXXX' \
  --header 'Content-Type: application/json' \
  --data '
{
  "[card_id]": {
    "data": {
      "name": "Test Card",
      "markup": "# Testing",
      "html": "",
      "tags": [],
      "id": "b04c7f96-41e1-4ece-8922-8eb96586055e"
    },
    "membership": {
      "personal_tags": [],
      "id": "b04c7f96-41e1-4ece-8922-8eb96586055e"
    }
  }
}

And I get the following response:

{
  "type": "basic",
  "detail": "api key missing required scope: CARDS_CREATE",
  "meta": null,
  "status": 403
}

Reading around, I thought you were able to create cards? Is there some fine grained API keys you create somewhere?

I created a second API key and it had the same issue.