Specifically observed trying to create a new app via the API
I accidentally reused a deploy token rather than correctly using an account access token, and took a while to figure out this was the source of app creation failing.
I’d expect/hope the graphql endpoint to always return a JSON error response with useful error (rather than HTML error page source), in particular when trying to perform an operation using an app’s deploy token that doesn’t have permission for the requested operation.