Broken Oauth

The tokens returned by the oauth endpoint are not working. Here's my example curl request:

Oauth request:
curl --location 'https://www.humanity.com/oauth2/token.php'
--header 'Content-Type: application/x-www-form-urlencoded'
--data-urlencode 'client_id=ac17a5e7440f7bea3fcfaae5b9054200eb269aa7'
--data-urlencode 'client_secret=ae63a59372d4f10e2cc41c3164f887bae03c3442'
--data-urlencode 'grant_type=password'
--data-urlencode 'username=[email protected]'
--data-urlencode 'password=****'

Response:
{"access_token":"8787ef2fc6732f3f10afd7fbabf50d55c79e6dd0","expires_in":3600,"token_type":"Bearer","scope":null,"refresh_token":"33997ce5179f89c0f5c455fa3a77aee8a931f17d"}

Request to /shifts using the access_token from the above response:
curl --location "https://www.humanity.com/api/v2/shifts?access_token=8787ef2fc6732f3f10afd7fbabf50d55c79e6dd0&end_date=2023-03-04&start_date=2023-03-03

Response:
{"status":20,"data":"Incorrect Permissions - You don't have the proper permissions to access this","error":"This account is not activated.","token":"8787ef2fc6732f3f10afd7fbabf50d55c79e6dd0"}