It’s “only” a token with “channel:read:subscriptions” scope, so i can share it (and revoke it later) no sensitive data share with this.
I barely have no subscriber on this account (but i have one for sure !)
I have the same issue with the streamer i’m working for. (more than 1K sub for this streamer)
Information about the token :
$ curl -H 'Accept: application/vnd.twitchtv.v5+json' \
-H 'Authorization: OAuth REMOVED' \
-X GET 'https://api.twitch.tv/kraken'
{"token":{"valid":true,"authorization":{"scopes":["channel:read:subscriptions"],"created_at":"2019-05-14T10:03:44Z","updated_at":"2019-05-14T10:03:44Z"},"user_name":"scorfly","user_id":"145328278","client_id":"gp762nuuoqcoxypju8c569th9wz7q5"}}
Call :
curl -H 'Authorization: Bearer REMOVED' -X GET "https://api.twitch.tv/helix/subscriptions?broadcaster_id=145328278"
{"error":"Not Found","status":404,"message":"This API does not exist"}