zdev_live_...) for Pay with Zend payment requests. They’re separate from ZApp keys (zapp_sk_...), which come from zend apps create.
create
--scopes takes a comma-separated list. Default: create_payment_request,read.
The key is shown once. You can’t create a key with a scope your current key doesn’t have, so a narrow key can’t grant itself more access.