# \#m2m

**URL:** https://community.auth0.com/tag/m2m/1541.md

[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)

---

## [M2M quota exceeded — Request for one-time relief after fixing token caching](https://community.auth0.com/t/m2m-quota-exceeded-request-for-one-time-relief-after-fixing-token-caching/204848)

<div class="topic-metadata">

**Author:** [@tadeu](https://community.auth0.com/u/tadeu)\
**Replies:** 1\
**Last updated:** [October 30, 2026, 12:17am UTC](https://community.auth0.com/t/m2m-quota-exceeded-request-for-one-time-relief-after-fixing-token-caching/204848 "2026-10-30T00:17:50Z")

</div>

Hello Auth0 Team, Our Free plan tenant kurasoft has exceeded its monthly Machine-to-Machine authentication quota (1,102 / 1,000). This has interrupted our production Google Ads integration, and Auth0 logs confirm the e…

---

## [Expiration DateTime for Machine to Machine Applications (Client Credentials flow)](https://community.auth0.com/t/expiration-datetime-for-machine-to-machine-applications-client-credentials-flow/198664)

<div class="topic-metadata">

**Author:** [@aburck](https://community.auth0.com/u/aburck)\
**Replies:** 1\
**Last updated:** [April 30, 2026, 6:29pm UTC](https://community.auth0.com/t/expiration-datetime-for-machine-to-machine-applications-client-credentials-flow/198664 "2026-04-30T18:29:40Z")

</div>

Feature: Machine to Machine Application Expiration Use-case: We build and sell APIs. To grant customers access to our APIs, we create Machine to Machine (M2M) Applications for each customer and provide them with their C…

---

## [Dealing With Non-Human Identities](https://community.auth0.com/t/dealing-with-non-human-identities/191634)

<div class="topic-metadata">

**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [September 9, 2025, 9:11am UTC](https://community.auth0.com/t/dealing-with-non-human-identities/191634 "2025-09-09T09:11:52Z")

</div>

“Isn’t Non-Human Identities just a fancy new name for machine identities, service accounts, or application identities?” You’re not wrong—they are all part of the same family. But the term “Non-Human Identity” highlights …

---

## [Is there a way to update the m2m access token so that the scopes are an array rather than a string](https://community.auth0.com/t/is-there-a-way-to-update-the-m2m-access-token-so-that-the-scopes-are-an-array-rather-than-a-string/93533)

<div class="topic-metadata">

**Author:** [@paul10](https://community.auth0.com/u/paul10)\
**Replies:** 4\
**Last updated:** [November 3, 2022, 7:06pm UTC](https://community.auth0.com/t/is-there-a-way-to-update-the-m2m-access-token-so-that-the-scopes-are-an-array-rather-than-a-string/93533 "2022-11-03T19:06:39Z")

</div>

This is related to this request which I saw was closed - Change the scope from string to array format in access token. I have the same issue and was wondering if there is a way. We have an integration partner who require…

---

## [M2M Token increase](https://community.auth0.com/t/m2m-token-increase/91979)

<div class="topic-metadata">

**Author:** [@pramodya.dealwis](https://community.auth0.com/u/pramodya.dealwis)\
**Replies:** 5\
**Last updated:** [October 11, 2022, 6:29pm UTC](https://community.auth0.com/t/m2m-token-increase/91979 "2022-10-11T18:29:36Z")

</div>

I’ve passed the M2M token allocation on our UAT environment. Is there anyway to increase that temporarily for this month without paying a ridiculous fee since this is all we need.

---

## [M2M can't invite users to organizations](https://community.auth0.com/t/m2m-cant-invite-users-to-organizations/91893)

<div class="topic-metadata">

**Author:** [@dev43](https://community.auth0.com/u/dev43)\
**Replies:** 2\
**Last updated:** [October 10, 2022, 7:08am UTC](https://community.auth0.com/t/m2m-cant-invite-users-to-organizations/91893 "2022-10-10T07:08:34Z")

</div>

Hi, I’m trying to send an invitation with the management API but receive a 400 response saying: “The specified client\_id does not allow organizations.” Every other API call I tried with this M2M client ID works well (c…

---

## [Application not listing organization invite member dropdown](https://community.auth0.com/t/application-not-listing-organization-invite-member-dropdown/89580)

<div class="topic-metadata">

**Author:** [@arunkumar.new1995](https://community.auth0.com/u/arunkumar.new1995)\
**Replies:** 1\
**Last updated:** [August 29, 2022, 11:53pm UTC](https://community.auth0.com/t/application-not-listing-organization-invite-member-dropdown/89580 "2022-08-29T23:53:14Z")

</div>

Hi Guys, I am creating one M2M Application and I want to send Invitation link to the members So I am going to invite members in selected organization via Auth0 Console the select Application dropdown not listing M2M cr…

---

## [Having trouble calling the Management API from my Node backend using an M2M token](https://community.auth0.com/t/having-trouble-calling-the-management-api-from-my-node-backend-using-an-m2m-token/88754)

<div class="topic-metadata">

**Author:** [@robliou01](https://community.auth0.com/u/robliou01)\
**Replies:** 1\
**Last updated:** [August 16, 2022, 3:33pm UTC](https://community.auth0.com/t/having-trouble-calling-the-management-api-from-my-node-backend-using-an-m2m-token/88754 "2022-08-16T15:33:33Z")

</div>

Hi! I’m curious what is a working way to get my SPA (front-end) + Node (back-end) setup to call the Management API using an M2M token without generating a CORS error? Using the Auth0 tutorials, I can authenticate with …

---

## [Organizations scopes (logs and m2m)](https://community.auth0.com/t/organizations-scopes-logs-and-m2m/87469)

<div class="topic-metadata">

**Author:** [@notdodo](https://community.auth0.com/u/notdodo)\
**Replies:** 2\
**Last updated:** [July 22, 2022, 3:04pm UTC](https://community.auth0.com/t/organizations-scopes-logs-and-m2m/87469 "2022-07-22T15:04:20Z")

</div>

Hi, I’d like to know if using the enterprise plan with organizations, it is possible to create and manage M2M tokens withing a single organizations or they are available only globally in the tenant. In the same topic, …

---

## [NextJs Auth0 - getAccessToken M2M Quota Limits?](https://community.auth0.com/t/nextjs-auth0-getaccesstoken-m2m-quota-limits/84736)

<div class="topic-metadata">

**Author:** [@stefano.brandoli23](https://community.auth0.com/u/stefano.brandoli23)\
**Replies:** 3\
**Last updated:** [June 10, 2022, 12:15am UTC](https://community.auth0.com/t/nextjs-auth0-getaccesstoken-m2m-quota-limits/84736 "2022-06-10T00:15:50Z")

</div>

Which SDK this is regarding: “@auth0/nextjs-auth0”: “1.9.0” Hi there, I’m setting up a NextJs application that will use Auth0 to login/signup, social logins included. This app needs to call our backend with informat…

---

## [API credentials for clients in a multi-tenant setup](https://community.auth0.com/t/api-credentials-for-clients-in-a-multi-tenant-setup/83099)

<div class="topic-metadata">

**Author:** [@subtlestag](https://community.auth0.com/u/subtlestag)\
**Replies:** 4\
**Last updated:** [May 24, 2022, 3:25pm UTC](https://community.auth0.com/t/api-credentials-for-clients-in-a-multi-tenant-setup/83099 "2022-05-24T15:25:16Z")

</div>

Hi, I am designing a multi-tenant authentication/authorization setup, in which different client applications (tenants) will require access to an API that I manage. Just to clarify, each tenant will run several NodeJS/Go…

---

## [401/403 (unauthorized\_client w/grant type client\_credentials) when requesting token for M2M client](https://community.auth0.com/t/401-403-unauthorized-client-w-grant-type-client-credentials-when-requesting-token-for-m2m-client/80954)

<div class="topic-metadata">

**Author:** [@joelp](https://community.auth0.com/u/joelp)\
**Replies:** 3\
**Last updated:** [April 6, 2022, 5:37pm UTC](https://community.auth0.com/t/401-403-unauthorized-client-w-grant-type-client-credentials-when-requesting-token-for-m2m-client/80954 "2022-04-06T17:37:11Z")

</div>

I’m sure I’m doing something simple wrong here but I can’t request a token for my M2M client no matter what I try. If I submit my POST request with raw JSON I get a 401 access denied. If I submit my params as application…

---

## [Protected API request from actions](https://community.auth0.com/t/protected-api-request-from-actions/79499)

<div class="topic-metadata">

**Author:** [@luka1](https://community.auth0.com/u/luka1)\
**Replies:** 3\
**Last updated:** [March 21, 2022, 5:22pm UTC](https://community.auth0.com/t/protected-api-request-from-actions/79499 "2022-03-21T17:22:06Z")

</div>

Hello, I would like to call a protected API from my actions. I was thinking of using M2M flow, but that means that I’d have to do client credential exchange every time action is triggered - which is a bit excessive IMO …

---

## [Communicating secrets/secret exchange best practices](https://community.auth0.com/t/communicating-secrets-secret-exchange-best-practices/76234)

<div class="topic-metadata">

**Author:** [@Paul.K](https://community.auth0.com/u/Paul.K)\
**Replies:** 1\
**Last updated:** [January 13, 2022, 7:33pm UTC](https://community.auth0.com/t/communicating-secrets-secret-exchange-best-practices/76234 "2022-01-13T19:33:12Z")

</div>

I’m looking for a way to share credentials with my clients via an onboarding process securely, and I want to know if something exists I can reuse beyond the management API SDK (where I would be programming part of the so…

---

## [How to obtain google refresh token by /api/v2/users api endpoint?](https://community.auth0.com/t/how-to-obtain-google-refresh-token-by-api-v2-users-api-endpoint/73081)

<div class="topic-metadata">

**Author:** [@PreciseLab](https://community.auth0.com/u/PreciseLab)\
**Replies:** 1\
**Last updated:** [November 15, 2021, 10:41pm UTC](https://community.auth0.com/t/how-to-obtain-google-refresh-token-by-api-v2-users-api-endpoint/73081 "2021-11-15T22:41:28Z")

</div>

I have user logged in by google by regular app with implicit flow. I created m2m application and obtained management token. Now I send request about user https://preciselab.eu.auth0.com/api/v2/users/google-oauth2%7C11…

---

## [Inserting Metadata Into Requests](https://community.auth0.com/t/inserting-metadata-into-requests/70491)

<div class="topic-metadata">

**Author:** [@a.pinzon](https://community.auth0.com/u/a.pinzon)\
**Replies:** 2\
**Last updated:** [October 1, 2021, 10:21am UTC](https://community.auth0.com/t/inserting-metadata-into-requests/70491 "2021-10-01T10:21:58Z")

</div>

Hi everyone, I’m building a customer API where merchants can create orders, transactions, etc. I would like each customer to be able to submit requests to my backend, but I’m able to convey certain metadata to my backe…

---

## [Multiple users for Machine to Machine applications](https://community.auth0.com/t/multiple-users-for-machine-to-machine-applications/70444)

<div class="topic-metadata">

**Author:** [@a.pinzon](https://community.auth0.com/u/a.pinzon)\
**Replies:** 3\
**Last updated:** [September 30, 2021, 2:26pm UTC](https://community.auth0.com/t/multiple-users-for-machine-to-machine-applications/70444 "2021-09-30T14:26:57Z")

</div>

Hi everyone, I’m building a customer API where they’ll be able to create orders, transactions, customers, etc. We believe the way to go is to implement a M2M integration where our Application is called “Merchant API” a…

---

## [Let Users generate restricted M2M API-Token?](https://community.auth0.com/t/let-users-generate-restricted-m2m-api-token/67991)

<div class="topic-metadata">

**Author:** [@thomasmic](https://community.auth0.com/u/thomasmic)\
**Replies:** 4\
**Last updated:** [August 19, 2021, 7:33am UTC](https://community.auth0.com/t/let-users-generate-restricted-m2m-api-token/67991 "2021-08-19T07:33:56Z")

</div>

Hi! I am looking into IAM. I want to give Users the possibility to generate API-Tokens (technically it will be Client Credentials I assume) which gives them API-Access without ROPC. Ideally the long-therm token can be …

---

## [M2M token quota exceeded on free plan](https://community.auth0.com/t/m2m-token-quota-exceeded-on-free-plan/63497)

<div class="topic-metadata">

**Author:** [@vvnihsirv](https://community.auth0.com/u/vvnihsirv)\
**Replies:** 1\
**Last updated:** [May 28, 2021, 10:42am UTC](https://community.auth0.com/t/m2m-token-quota-exceeded-on-free-plan/63497 "2021-05-28T10:42:42Z")

</div>

So I am currently under the free plan. And I have exceed the free plan by mistake. currently at 6.1k /1k M2M calls. My issue is, my tokens are still generated, but they time out now and then. Is the time out part expect…

---

## [M2M quota clarification for SPA](https://community.auth0.com/t/m2m-quota-clarification-for-spa/63276)

<div class="topic-metadata">

**Author:** [@jean-paul.gorman](https://community.auth0.com/u/jean-paul.gorman)\
**Replies:** 1\
**Last updated:** [May 24, 2021, 6:37pm UTC](https://community.auth0.com/t/m2m-quota-clarification-for-spa/63276 "2021-05-24T18:37:05Z")

</div>

I’m just in the process of reviewing our use of Auth0 as the Auth server for out app, but I wasn’t able to clarify if the M2M limit applies to the PKCE flow within and SPA. Can you let me know if M2M includes the issuing…

---

## [Server error while trying to login on the Auth0 playground](https://community.auth0.com/t/server-error-while-trying-to-login-on-the-auth0-playground/63051)

<div class="topic-metadata">

**Author:** [@contactgorank](https://community.auth0.com/u/contactgorank)\
**Replies:** 1\
**Last updated:** [May 20, 2021, 5:43pm UTC](https://community.auth0.com/t/server-error-while-trying-to-login-on-the-auth0-playground/63051 "2021-05-20T17:43:44Z")

</div>

Hi, We are trying to create a bearer token to check how m2m authentication works on auth0. We are getting a ‘server error’ when we try to login on the tight panel of the sandbox. I have attached the screenshot here. …

---

## [M2M quota does not seems to be correct](https://community.auth0.com/t/m2m-quota-does-not-seems-to-be-correct/61458)

<div class="topic-metadata">

**Author:** [@brecht.laitem](https://community.auth0.com/u/brecht.laitem)\
**Replies:** 3\
**Last updated:** [May 5, 2021, 3:43pm UTC](https://community.auth0.com/t/m2m-quota-does-not-seems-to-be-correct/61458 "2021-05-05T15:43:58Z")

</div>

Hi, We received an email yesterday saying we reached 80% of our monthly M2M tokens usage quota. But on the quota utilization page it says we are only at 386/1000 yet. I waited 24h to make sure the dashboard was up-to-da…

---

## [Allow specific outside customers access to our API server with m2m machine to machine token](https://community.auth0.com/t/allow-specific-outside-customers-access-to-our-api-server-with-m2m-machine-to-machine-token/61219)

<div class="topic-metadata">

**Author:** [@dak2009](https://community.auth0.com/u/dak2009)\
**Replies:** 3\
**Last updated:** [April 19, 2021, 5:18pm UTC](https://community.auth0.com/t/allow-specific-outside-customers-access-to-our-api-server-with-m2m-machine-to-machine-token/61219 "2021-04-19T17:18:12Z")

</div>

We are using machine to machine tokens to secure our internal application connects to our public API servers. Now we want our external customers to be able to use their applications to connect to our public API using ma…

---

## [What account I need to subscribe for in order to get more than 100 M2M token](https://community.auth0.com/t/what-account-i-need-to-subscribe-for-in-order-to-get-more-than-100-m2m-token/60408)

<div class="topic-metadata">

**Author:** [@santhosh1](https://community.auth0.com/u/santhosh1)\
**Replies:** 1\
**Last updated:** [April 1, 2021, 3:52pm UTC](https://community.auth0.com/t/what-account-i-need-to-subscribe-for-in-order-to-get-more-than-100-m2m-token/60408 "2021-04-01T15:52:12Z")

</div>

My use case is such that I want to create M2M app per client since these client need API access. Auth0 gives 100 M2M app with developer account which is not sufficient since there are more number of clients. I would like…

---

## [Adding custom payload data during M2M authentication(Client credentials flow)](https://community.auth0.com/t/adding-custom-payload-data-during-m2m-authentication-client-credentials-flow/59995)

<div class="topic-metadata">

**Author:** [@kamal.pradhan](https://community.auth0.com/u/kamal.pradhan)\
**Replies:** 3\
**Last updated:** [March 25, 2021, 10:47pm UTC](https://community.auth0.com/t/adding-custom-payload-data-during-m2m-authentication-client-credentials-flow/59995 "2021-03-25T22:47:48Z")

</div>

Hi, We are trying to pass some data in the form body when calling the “/oauth/token” endpoint during the m2m authentication using client client credential flow. payload custom data added : .xyz Domain Names | Join Gene…

---

## [M2M unauthorized error after deploy](https://community.auth0.com/t/m2m-unauthorized-error-after-deploy/58319)

<div class="topic-metadata">

**Author:** [@luis.perezsanchez](https://community.auth0.com/u/luis.perezsanchez)\
**Replies:** 3\
**Last updated:** [February 23, 2021, 1:55pm UTC](https://community.auth0.com/t/m2m-unauthorized-error-after-deploy/58319 "2021-02-23T13:55:00Z")

</div>

Hello, I’m using M2M api from a Backend application to change user profile. This a snippet of the code I’m using: const authClient = new AuthenticationClient({ domain: MY\_DOMAIN, clientId: "My M2M Cl…

---

## [I offer service as an API. Do I have to create an application for each user?](https://community.auth0.com/t/i-offer-service-as-an-api-do-i-have-to-create-an-application-for-each-user/48529)

<div class="topic-metadata">

**Author:** [@fnfilho](https://community.auth0.com/u/fnfilho)\
**Replies:** 3\
**Last updated:** [August 26, 2020, 2:03pm UTC](https://community.auth0.com/t/i-offer-service-as-an-api-do-i-have-to-create-an-application-for-each-user/48529 "2020-08-26T14:03:31Z")

</div>

Hey there, I’m just starting to use Auth0 and I am stuck on how this would work. We offer services that are 100% an API. We don’t have any kind of front-end services, not even a login screen. After someone signs up, we…

---

## [M2M token storage](https://community.auth0.com/t/m2m-token-storage/47701)

<div class="topic-metadata">

**Author:** [@ryangoy](https://community.auth0.com/u/ryangoy)\
**Replies:** 5\
**Last updated:** [August 13, 2020, 4:50pm UTC](https://community.auth0.com/t/m2m-token-storage/47701 "2020-08-13T16:50:27Z")

</div>

I’m using M2M tokens for other backend servers to directly access my API by issuing tokens through the client credentials grant. The backend server will use this token to access my API servers times over the next 12 hou…
