It's even worse than facebook's approach to XMPP (I didn't think that's possible): Not only does it not provide server-to-server access, it also requires client tokens for OAuth that must be requested out-of-band, so any vanilla XMPP client can't make use of that endpoint.
