M2M token endpoint moves to the API host
Improved
- Machine-to-machine (M2M) authentication — The
client_credentialstoken endpoint is nowhttps://api.brevo.com/realms/partner/oauth/token, on the same host as the API. The previous URL,https://oauth.brevo.com/realms/partner/oauth/token, keeps working. The guide’s token example now requests an explicitscopeand explains that requesting a scope the app wasn’t granted returns400 invalid_scope. - API reference — The OAuth 2.0 token URL in the API reference points to the new endpoint.
Request an explicit scope when you get a token. A token requested without one carries every scope granted to the app.