The m-default token has audience https://default.logto.app/api which is rejected by port 3002's admin tenant API. Use m-admin client with audience https://admin.logto.app/api instead. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>