ZegnatI found this very confusing at first too. I thought it obvious that a token endpoint goes hand in hand with an authorisation endpoint. In reality it goes hand in hand with API endpoints like Micropub. (At least that new way of thinking made it more clear to me.)
