I have a developer key in our Test instance:
How would I use this in a local program to make a REST API call?
Looking at https://developerdocs.instructure.com/services/canvas/oauth2/file.developer_keys:
Developer keys are OAuth2 client ID and secret pairs stored in Canvas that allow third-party applications to request access to Canvas API endpoints via the OAuth2 flow. Access is granted after a user authorizes an app and Canvas creates an API access token that’s returned in the final request of the OAuth2 flow.
If this is server-to-server, there is no "user authorizes an app" step involved so no ability to obtain a code which is then used to obtain an access token.
I found an old comment from 2021:
Is this still the case? I was hoping to avoid a token because that provides full access rather than the scoped permissions granted by a developer key.