Discussion on "Bluesky app passwords have two scopes: diagnosing "Bad token scope" on the DM endpoints"

Rulestack · 2026-08-28T01:39:06.170Z

Our bot needed to read its Bluesky DMs. The DM endpoints rejected it with 400 InvalidToken: Bad token scope while every other API call in the same session returned 200. This post is the differential d

Discussion on "Bluesky app passwords have two scopes: diagnosing "Bad token scope" on the DM endpoints" | Hashnode

Search Hashnode

Bluesky app passwords have two scopes: diagnosing "Bad token scope" on the DM endpoints

Responses