curl --request POST \
  --url https://api.getovra.com/canvas/mandate/apply \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "mandateJwt": "<string>",
  "passkeyDescriptor": {
    "credential_id": "<string>",
    "backed_up": true,
    "transports": [
      "<string>"
    ]
  }
}
'

{
  "error": "<string>"
}