Their "API" isn't what's being accessed here. As far as I understand it's using their subscription account oauth token in some third party app that's the issue here.
Either the token works for all times, or works until it doesn't, or does not work at all.
Punishing the account for using a token you have vended for the exact same purpose is extremely poor product design.