WFM API 401 Unauthorized on Schedule Read

does anyone know why we are hitting 401 unauthorized on GET /api/v2/wfm/schedules? we are using the same oauth token that works for analytics. the appfoundry integration has full wfm permissions and the service account is active. this is blocking our custom scheduling tool deployment.