Found out that you can Create/Update permissions using this endpoint: Add API Permissions
You may need to add some extra logic to your backend when using it tho, as it when you send the scopes field, it will actually override it, so you need to send all of the scopes every time you update/create a new one.