Listing OAuth clients and scopes via API

Trying to audit scope assignments for all OAuth clients in our org. The GET /api/v2/oauth/clients endpoint returns a list, but the response only includes basic metadata like client_id and name. No scope data included.

Tried appending ?expansion=scopes but got a 400 BAD_REQUEST saying expansion is invalid. Documentation doesn’t list scopes as a valid expansion. How do I get the scopes for each client?

Scopes aren’t in the client list response. You have to hit the individual client endpoint for each ID.

GET /api/v2/oauth/clients/{clientId}
Authorization: Bearer <token>