# \#machine-to-machine

**URL:** https://community.auth0.com/tag/machine-to-machine/1136.md

[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)

---

## [M2M quota exceeded — Request for one-time relief after fixing token caching](https://community.auth0.com/t/m2m-quota-exceeded-request-for-one-time-relief-after-fixing-token-caching/204848)

<div class="topic-metadata">

**Author:** [@tadeu](https://community.auth0.com/u/tadeu)\
**Replies:** 1\
**Last updated:** [October 30, 2026, 12:17am UTC](https://community.auth0.com/t/m2m-quota-exceeded-request-for-one-time-relief-after-fixing-token-caching/204848 "2026-10-30T00:17:50Z")

</div>

Hello Auth0 Team, Our Free plan tenant kurasoft has exceeded its monthly Machine-to-Machine authentication quota (1,102 / 1,000). This has interrupted our production Google Ads integration, and Auth0 logs confirm the e…

---

## [Empty "permissions" claim in M2M token](https://community.auth0.com/t/empty-permissions-claim-in-m2m-token/108112)

<div class="topic-metadata">

**Author:** [@kvirk](https://community.auth0.com/u/kvirk)\
**Replies:** 6\
**Last updated:** [June 9, 2023, 10:59am UTC](https://community.auth0.com/t/empty-permissions-claim-in-m2m-token/108112 "2023-06-09T10:59:34Z")

</div>

Hi, I have created an API and added scopes/permissions to it and allowed a machine-to-machine app to access it with all the permissions enabled. When I am trying to fetch the access\_token via postman, the token I receiv…

---

## [Authenticate third-party apps](https://community.auth0.com/t/authenticate-third-party-apps/90508)

<div class="topic-metadata">

**Author:** [@kvirk](https://community.auth0.com/u/kvirk)\
**Replies:** 6\
**Last updated:** [October 1, 2022, 12:51am UTC](https://community.auth0.com/t/authenticate-third-party-apps/90508 "2022-10-01T00:51:00Z")

</div>

Hi, I am pretty much new to Auth0. I am building an API in nest.js that is secured by Auth0. So if a user has a valid access token, it can access the API. I need to expose the API to third-party applications, which wil…

---

## [Regulating Access Token use by External APIs](https://community.auth0.com/t/regulating-access-token-use-by-external-apis/90799)

<div class="topic-metadata">

**Author:** [@f8DhZh3P](https://community.auth0.com/u/f8DhZh3P)\
**Replies:** 1\
**Last updated:** [October 1, 2022, 12:50am UTC](https://community.auth0.com/t/regulating-access-token-use-by-external-apis/90799 "2022-10-01T00:50:52Z")

</div>

Hi there, I have enterprise customers that would like to access my API programatically. It appears the way to do this is using the Client Credentials flow: Create a new M2M Application for each enterprise customer. Gi…

---

## [Add user's email to accessToken using m2m login](https://community.auth0.com/t/add-users-email-to-accesstoken-using-m2m-login/90428)

<div class="topic-metadata">

**Author:** [@barriaandradedaniel](https://community.auth0.com/u/barriaandradedaniel)\
**Replies:** 1\
**Last updated:** [September 21, 2022, 12:49am UTC](https://community.auth0.com/t/add-users-email-to-accesstoken-using-m2m-login/90428 "2022-09-21T00:49:07Z")

</div>

Hi, im trying to insert the email into de accessToken. I’m using a m2m application. I created a Client Credentials exchange hooks, but in the base script I can’t see a params that actually add the user’s email. Please …

---

## [Rules not working in machine to machine applications](https://community.auth0.com/t/rules-not-working-in-machine-to-machine-applications/84168)

<div class="topic-metadata">

**Author:** [@naman.chaturvedi](https://community.auth0.com/u/naman.chaturvedi)\
**Replies:** 4\
**Last updated:** [May 31, 2022, 3:43pm UTC](https://community.auth0.com/t/rules-not-working-in-machine-to-machine-applications/84168 "2022-05-31T15:43:25Z")

</div>

I defined a rule to add email of the user to access token. But its not executing in machine to machine application. What should I do to make it execute in machine to machine application. I tried doing same thing using ac…

---

## [Machine to Machine application cannot retrieve API token](https://community.auth0.com/t/machine-to-machine-application-cannot-retrieve-api-token/73053)

<div class="topic-metadata">

**Author:** [@gonzalo.hirsch](https://community.auth0.com/u/gonzalo.hirsch)\
**Replies:** 2\
**Last updated:** [November 25, 2021, 10:23am UTC](https://community.auth0.com/t/machine-to-machine-application-cannot-retrieve-api-token/73053 "2021-11-25T10:23:06Z")

</div>

Hi, I’m working on implementing a Machine to Machine application in a server to communicate with an internal API. I followed the steps on the Auth0 page but I still get a 401 when the token is requested using an axios PO…

---

## [How to create a Machine to Machine application with access to Management API and other Custom API](https://community.auth0.com/t/how-to-create-a-machine-to-machine-application-with-access-to-management-api-and-other-custom-api/72605)

<div class="topic-metadata">

**Author:** [@santhoshk](https://community.auth0.com/u/santhoshk)\
**Replies:** 5\
**Last updated:** [November 5, 2021, 2:34pm UTC](https://community.auth0.com/t/how-to-create-a-machine-to-machine-application-with-access-to-management-api-and-other-custom-api/72605 "2021-11-05T14:34:26Z")

</div>

I have created a M2M app which gets me a Management API token to create a New M2M app. But these M2M app needs to be associated with Management API (with necessary scopes). It also needs to associate with our own API . …

---

## [Multiple Auth0 APIs](https://community.auth0.com/t/multiple-auth0-apis/70449)

<div class="topic-metadata">

**Author:** [@mmbmf1](https://community.auth0.com/u/mmbmf1)\
**Replies:** 5\
**Last updated:** [October 6, 2021, 11:55am UTC](https://community.auth0.com/t/multiple-auth0-apis/70449 "2021-10-06T11:55:28Z")

</div>

Hello, I have a single Auth0 application that will be assigned scopes when requesting an access token. The machines requesting this token will all use the same client id and secret from the application. The only differe…

---

## [Add roles in payload of client credentials](https://community.auth0.com/t/add-roles-in-payload-of-client-credentials/67113)

<div class="topic-metadata">

**Author:** [@abelose90](https://community.auth0.com/u/abelose90)\
**Replies:** 5\
**Last updated:** [August 3, 2021, 3:17pm UTC](https://community.auth0.com/t/add-roles-in-payload-of-client-credentials/67113 "2021-08-03T15:17:33Z")

</div>

Hi, my use case is quite simple. I am running postman tests and the apis need the jwt token. Currently I am passing the bearer token manually, which I would like to automate. I payload of my bearer token I am adding Rol…

---

## [Adding custom payload data during M2M authentication(Client credentials flow)](https://community.auth0.com/t/adding-custom-payload-data-during-m2m-authentication-client-credentials-flow/59995)

<div class="topic-metadata">

**Author:** [@kamal.pradhan](https://community.auth0.com/u/kamal.pradhan)\
**Replies:** 3\
**Last updated:** [March 25, 2021, 10:47pm UTC](https://community.auth0.com/t/adding-custom-payload-data-during-m2m-authentication-client-credentials-flow/59995 "2021-03-25T22:47:48Z")

</div>

Hi, We are trying to pass some data in the form body when calling the “/oauth/token” endpoint during the m2m authentication using client client credential flow. payload custom data added : .xyz Domain Names | Join Gene…

---

## [What counts as an "Access Token Issued"](https://community.auth0.com/t/what-counts-as-an-access-token-issued/56653)

<div class="topic-metadata">

**Author:** [@jake3](https://community.auth0.com/u/jake3)\
**Replies:** 1\
**Last updated:** [January 22, 2021, 6:52pm UTC](https://community.auth0.com/t/what-counts-as-an-access-token-issued/56653 "2021-01-22T18:52:14Z")

</div>

The quota for Machine to Machine tokens is billed on an “Access Token Issued” basis, however we’re not quite clear about what this means. In particular in the following scenario would one or two Access Tokens be issued? …

---

## [Machine-to-Machine tokens for the management API](https://community.auth0.com/t/machine-to-machine-tokens-for-the-management-api/52486)

<div class="topic-metadata">

**Author:** [@gassauer.samuel](https://community.auth0.com/u/gassauer.samuel)\
**Replies:** 3\
**Last updated:** [November 3, 2020, 10:03pm UTC](https://community.auth0.com/t/machine-to-machine-tokens-for-the-management-api/52486 "2020-11-03T22:03:48Z")

</div>

Hello there, I plan to use Auth0 authentication for my startup. Therefore, I need to call the Management API from the backend. Right now, I’m trying to find out if we can use the developer plan for our product. I alread…

---

## [M2M Applications - Client credentials flow so a user can consume an API with a secret key](https://community.auth0.com/t/m2m-applications-client-credentials-flow-so-a-user-can-consume-an-api-with-a-secret-key/46213)

<div class="topic-metadata">

**Author:** [@david.silis](https://community.auth0.com/u/david.silis)\
**Replies:** 3\
**Last updated:** [July 23, 2020, 10:46pm UTC](https://community.auth0.com/t/m2m-applications-client-credentials-flow-so-a-user-can-consume-an-api-with-a-secret-key/46213 "2020-07-23T22:46:08Z")

</div>

Hello, I have a doubt regarding M2M Applications. Our clients (enterprises) interact with our API via a M2M Application (client credentials flow) per client (with their associated permissions per application to consume …

---

## [Calling internal API services from public API service with user context](https://community.auth0.com/t/calling-internal-api-services-from-public-api-service-with-user-context/45753)

<div class="topic-metadata">

**Author:** [@Beezlabs](https://community.auth0.com/u/Beezlabs)\
**Replies:** 0\
**Last updated:** [July 3, 2020, 9:46am UTC](https://community.auth0.com/t/calling-internal-api-services-from-public-api-service-with-user-context/45753 "2020-07-03T09:46:56Z")

</div>

Hi We are having a microservice based architecture for our application which has a single frontend. This frontend will always talk to a single backend service, which provides a public API. So, the frontend and the backe…

---

## [Machine to Machine quota and the example React+API](https://community.auth0.com/t/machine-to-machine-quota-and-the-example-react-api/38962)

<div class="topic-metadata">

**Author:** [@AndreasSundman](https://community.auth0.com/u/AndreasSundman)\
**Replies:** 1\
**Last updated:** [March 6, 2020, 12:20pm UTC](https://community.auth0.com/t/machine-to-machine-quota-and-the-example-react-api/38962 "2020-03-06T12:20:49Z")

</div>

If you follow the React quick start tutorial and the Calling API by using the SDK to build a SPA, hence using the Authorization Code Grant Flow with PKCE. Will anything in this setup count toward machine to machine quota…

---

## [Tenant Production Checks - m2m requires email provider](https://community.auth0.com/t/tenant-production-checks-m2m-requires-email-provider/36882)

<div class="topic-metadata">

**Author:** [@MyMirelHub](https://community.auth0.com/u/MyMirelHub)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 3:54pm UTC](https://community.auth0.com/t/tenant-production-checks-m2m-requires-email-provider/36882 "2020-01-27T15:54:48Z")

</div>

I am trying to make a tenant production-ready using the Production Check feature highlighted here: However, I get an error than an email provider is not configured. Our use case is a bit different, we only use Aut…

---

## [Client Credentials Flow (machine-to-machine) with user credentials](https://community.auth0.com/t/client-credentials-flow-machine-to-machine-with-user-credentials/36259)

<div class="topic-metadata">

**Author:** [@jm2supra](https://community.auth0.com/u/jm2supra)\
**Replies:** 3\
**Last updated:** [January 15, 2020, 3:54pm UTC](https://community.auth0.com/t/client-credentials-flow-machine-to-machine-with-user-credentials/36259 "2020-01-15T15:54:01Z")

</div>

Hi, My company is looking for a centralized way to manage authentication. We have various APIs hosted by my company and its subsidiaries. One of our architects suggested auth0 for that purpose so I am reading through y…

---

## [Exceeding Quota on Machine to Machine Tokens](https://community.auth0.com/t/exceeding-quota-on-machine-to-machine-tokens/22723)

<div class="topic-metadata">

**Author:** [@johndoyle](https://community.auth0.com/u/johndoyle)\
**Replies:** 1\
**Last updated:** [March 18, 2019, 10:32am UTC](https://community.auth0.com/t/exceeding-quota-on-machine-to-machine-tokens/22723 "2019-03-18T10:32:56Z")

</div>

Hey, We just received notice that we have been exceeding the limit on M2M tokens on the Developer plan (not pro), and curious what the timescale is to revert our implementation of M2M before access is cut off? Cheers

---

## [Machine to Machine Authentication Pricing Query](https://community.auth0.com/t/machine-to-machine-authentication-pricing-query/22417)

<div class="topic-metadata">

**Author:** [@peter.goffin](https://community.auth0.com/u/peter.goffin)\
**Replies:** 2\
**Last updated:** [March 11, 2019, 12:08pm UTC](https://community.auth0.com/t/machine-to-machine-authentication-pricing-query/22417 "2019-03-11T12:08:16Z")

</div>

Hello, I have been playing around with Auth0 using a free account which allows up to 1000 machine to machine authentications. I am planning to sign up for a Developer Pro account but wanted to confirm whether this allo…

---

## [Client Credential per IoT Device](https://community.auth0.com/t/client-credential-per-iot-device/21028)

<div class="topic-metadata">

**Author:** [@brennan.roberts](https://community.auth0.com/u/brennan.roberts)\
**Replies:** 6\
**Last updated:** [February 13, 2019, 11:42am UTC](https://community.auth0.com/t/client-credential-per-iot-device/21028 "2019-02-13T11:42:26Z")

</div>

On the topic of IoT devices, this Auth0 blog post states …you use the client credentials grant, giving each IoT device its own client ID and client secret I can’t find a way to give each IoT device it’s own client ID…

---

## [How to define Scope on API login using Machine to Machine app](https://community.auth0.com/t/how-to-define-scope-on-api-login-using-machine-to-machine-app/20278)

<div class="topic-metadata">

**Author:** [@davidr1](https://community.auth0.com/u/davidr1)\
**Replies:** 1\
**Last updated:** [January 22, 2019, 12:29pm UTC](https://community.auth0.com/t/how-to-define-scope-on-api-login-using-machine-to-machine-app/20278 "2019-01-22T12:29:27Z")

</div>

I’m implementing an authentication challenge in an Apple Business Chat conversation I’m using a Machine to Machine app with the management API. Apple calls the authorize endpoint with the client ID of my Auth0 App - t…

---

## [M2M ( client creditentials flow) pricing](https://community.auth0.com/t/m2m-client-creditentials-flow-pricing/19621)

<div class="topic-metadata">

**Author:** [@maxim\_naidenov](https://community.auth0.com/u/maxim_naidenov)\
**Replies:** 1\
**Last updated:** [January 4, 2019, 9:32pm UTC](https://community.auth0.com/t/m2m-client-creditentials-flow-pricing/19621 "2019-01-04T21:32:25Z")

</div>

I have a free account and I plan to use it “productively” for my upcoming project. Once it gets any significant usage I plan to go to payed account but I want to start slow so the free account fits me perfectly. I am ab…

---

## [Am I doing Machine to Machine right?](https://community.auth0.com/t/am-i-doing-machine-to-machine-right/19466)

<div class="topic-metadata">

**Author:** [@adam4](https://community.auth0.com/u/adam4)\
**Replies:** 1\
**Last updated:** [December 31, 2018, 2:37pm UTC](https://community.auth0.com/t/am-i-doing-machine-to-machine-right/19466 "2018-12-31T14:37:37Z")

</div>

My company has a SPA backed by an API. I have figured out how to use Auth0 using the Implicit Grant, and I can see how to manage users etc. We also want to offer our customers direct system integration to our API - in …

---

## [User access to machine-to-machine keys](https://community.auth0.com/t/user-access-to-machine-to-machine-keys/19066)

<div class="topic-metadata">

**Author:** [@sean-ea](https://community.auth0.com/u/sean-ea)\
**Replies:** 2\
**Last updated:** [December 21, 2018, 2:44pm UTC](https://community.auth0.com/t/user-access-to-machine-to-machine-keys/19066 "2018-12-21T14:44:13Z")

</div>

Hello, Is there a way to provide an external user access to a specific machine-to-machine client id/secret? The use case is that I want an application user to be able to register a key pair for their server to hit our …

---

## [How do I get app\_metaData to appear in JWT authtoken for a machine to machine application?](https://community.auth0.com/t/how-do-i-get-app-metadata-to-appear-in-jwt-authtoken-for-a-machine-to-machine-application/17457)

<div class="topic-metadata">

**Author:** [@athomas](https://community.auth0.com/u/athomas)\
**Replies:** 2\
**Last updated:** [November 5, 2018, 10:09am UTC](https://community.auth0.com/t/how-do-i-get-app-metadata-to-appear-in-jwt-authtoken-for-a-machine-to-machine-application/17457 "2018-11-05T10:09:22Z")

</div>

I set application metadata on the machine to machine application, but I can’t seem to figure out how to get that data to appear in the authtoken. How do I do that?

---

## [Can you use the (management?) API to query the number of "machine to machine" Auth?](https://community.auth0.com/t/can-you-use-the-management-api-to-query-the-number-of-machine-to-machine-auth/9125)

<div class="topic-metadata">

**Author:** [@dyau](https://community.auth0.com/u/dyau)\
**Replies:** 1\
**Last updated:** [January 4, 2018, 5:14pm UTC](https://community.auth0.com/t/can-you-use-the-management-api-to-query-the-number-of-machine-to-machine-auth/9125 "2018-01-04T17:14:12Z")

</div>

Is it possible to use the management API to monitor the number of machine to machine auth requests? We’d like to use this feature but would like to closely monitor it’s usage.
