Access token false?

I’ve got the indieauth plugin installed, and it seems to work, but when I try to do something on my site with a remote tool it fails with “unauthorized.” Looking at the initial response I see: { “access_token”: false, “token_type”: “Bearer”, “scope”: “create update media”, “me”: “ https://philipbrewer.net/” ; } I’m guessing that “false” where the token ought to be is the source of all the problems I see later. Any debugging suggestions welcome. The page I need help with: [ log in to see the link]