API: /oauth/activity returns another user's shared activity, none of my own

AFter reading the thread here on MCP and also intervals.icu API, I’ve been poking around on my own analysis and ran into a possible issue. I wanted to see if anyone else has this:

Using the public API with password grant (xert_public). /oauth/user and /oauth/training_info return my data correctly (signature, weight, status). But /oauth/activity?from=&to= returns exactly one activity for any date range I try — including from=1&to=2000000000 — and it isn’t mine: “Tough Mixed Rouleur Ride”, 2026-10-11, Garmin Edge 1040, 66 kg, group_sharing: "Squad", image paths under /user/6/. None of my ~130 activities since June 2026 appear. I’m not in a Squad and have no coach. Looks like the activity list is scoped wrong on the server side.

It’s just an example. Check out the new Developer feature and API at Xert Online API

Ah, thank you for the link. I had the legacy API info. This helps!