Spotify with Motoko bindings for the Spotify Web API, generated from Spotify's official OpenAPI spec: 15 API modules, 270 operations . The package is built in icp-cli mode ( for the management-canister interface), so it pulls as a dependency and pins PocketIC in . Backend Reading catalog data and driving the player. The token always comes from the caller — the canister never holds a Spotify client secret: Auth: the canister never sees a client secret Every call needs an OAuth 2.0 bearer access token , minted off-chain and passed in. Two flows matter: 1. Client Credentials — server-to-server,…