1) Just page-id/posts.

2) Our CTO was originally testing with an old token he had from a previous pet project. Our company's API access was submitted for approval sometime in the last couple weeks.

3) Low volume, thousands a day at max but hundreds is more likely.