Good points. Also, based on the API response there might be an issue with authorization. Ensure the client credentials have access to the scope you are hitting. And if you are using Postman ensure that it’s configured so client cookies aren’t being passed along with your API request.