Hi,
I think the problem is you have checked all the permission where you should to check only the required permission. So, you can create a new token with the following permissions.
Before you create a new token the following 3 permissions should be selected from the list of permission available on the Token page.
- View and search Envato sites (checked by default)
- Download the user’s purchased items
- List purchases the user has made
Hope this will help you.
Thanks