The token provided has insufficient scope [bonus_api] for this request

Questions
7

Perhaps try what is recommended here - For Postman in particular, it sounds like you will want to enter in your client_id + client_secret in Authorization → Basic → Username/Password