Best practice to set up one m2m app and multiple APIs

[dan.woda]

Hi @domasr,

Welcome to the Auth0 Community!

@domasr

Asking this since creating separate m2m apps seems to be a more secure approach because there will be different client ids and secrets used for each API. Is my understanding correct?

Generally, you would have one application. The application requests tokens from the auth server and uses the tokens to request resources from the API. I don’t see the benefit of multiple M2M applications in this scenario, but I would be happy to explore further if you provide more detail.