diff --git a/client.yml b/client.yml
index 374d41bd..35677943 100644
--- a/client.yml
+++ b/client.yml
@@ -15,7 +15,7 @@ info:
   license:
     name: Apache 2.0
     url: https://www.apache.org/licenses/LICENSE-2.0.html
-  version: 0.26.30
+  version: 0.26.31
 host: demo.ziti.dev
 basePath: /edge/client/v1
 paths:
@@ -3859,6 +3859,8 @@ definitions:
     required:
     - provider
     properties:
+      clientId:
+        type: string
       format:
         $ref: '#/definitions/mfaFormats'
       httpMethod:
@@ -3871,6 +3873,10 @@ definitions:
         type: integer
       provider:
         $ref: '#/definitions/mfaProviders'
+      scopes:
+        type: array
+        items:
+          type: string
       typeId:
         type: string
   authQueryList:
diff --git a/go.mod b/go.mod
index 4cb7cb82..54dd19e6 100644
--- a/go.mod
+++ b/go.mod
@@ -1,8 +1,8 @@
 module github.com/openziti/edge-api
 
-go 1.21
+go 1.22
 
-toolchain go1.22.1
+toolchain go1.23.1
 
 require (
 	github.com/fullsailor/pkcs7 v0.0.0-20190404230743-d7302db945fa
@@ -16,7 +16,7 @@ require (
 	github.com/jessevdk/go-flags v1.6.1
 	github.com/pkg/errors v0.9.1
 	github.com/sirupsen/logrus v1.9.3
-	golang.org/x/net v0.28.0
+	golang.org/x/net v0.29.0
 )
 
 require (
@@ -33,10 +33,10 @@ require (
 	github.com/mitchellh/mapstructure v1.5.0 // indirect
 	github.com/oklog/ulid v1.3.1 // indirect
 	github.com/opentracing/opentracing-go v1.2.0 // indirect
-	go.mongodb.org/mongo-driver v1.16.1 // indirect
-	go.opentelemetry.io/otel v1.29.0 // indirect
-	go.opentelemetry.io/otel/metric v1.29.0 // indirect
-	go.opentelemetry.io/otel/trace v1.29.0 // indirect
+	go.mongodb.org/mongo-driver v1.17.0 // indirect
+	go.opentelemetry.io/otel v1.30.0 // indirect
+	go.opentelemetry.io/otel/metric v1.30.0 // indirect
+	go.opentelemetry.io/otel/trace v1.30.0 // indirect
 	golang.org/x/sync v0.8.0 // indirect
 	golang.org/x/sys v0.25.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
diff --git a/go.sum b/go.sum
index 152b74a1..85f51337 100644
--- a/go.sum
+++ b/go.sum
@@ -65,18 +65,18 @@ github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UV
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg=
 github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
-go.mongodb.org/mongo-driver v1.16.1 h1:rIVLL3q0IHM39dvE+z2ulZLp9ENZKThVfuvN/IiN4l8=
-go.mongodb.org/mongo-driver v1.16.1/go.mod h1:oB6AhJQvFQL4LEHyXi6aJzQJtBiTQHiAd83l0GdFaiw=
-go.opentelemetry.io/otel v1.29.0 h1:PdomN/Al4q/lN6iBJEN3AwPvUiHPMlt93c8bqTG5Llw=
-go.opentelemetry.io/otel v1.29.0/go.mod h1:N/WtXPs1CNCUEx+Agz5uouwCba+i+bJGFicT8SR4NP8=
-go.opentelemetry.io/otel/metric v1.29.0 h1:vPf/HFWTNkPu1aYeIsc98l4ktOQaL6LeSoeV2g+8YLc=
-go.opentelemetry.io/otel/metric v1.29.0/go.mod h1:auu/QWieFVWx+DmQOUMgj0F8LHWdgalxXqvp7BII/W8=
+go.mongodb.org/mongo-driver v1.17.0 h1:Hp4q2MCjvY19ViwimTs00wHi7G4yzxh4/2+nTx8r40k=
+go.mongodb.org/mongo-driver v1.17.0/go.mod h1:wwWm/+BuOddhcq3n68LKRmgk2wXzmF6s0SFOa0GINL4=
+go.opentelemetry.io/otel v1.30.0 h1:F2t8sK4qf1fAmY9ua4ohFS/K+FUuOPemHUIXHtktrts=
+go.opentelemetry.io/otel v1.30.0/go.mod h1:tFw4Br9b7fOS+uEao81PJjVMjW/5fvNCbpsDIXqP0pc=
+go.opentelemetry.io/otel/metric v1.30.0 h1:4xNulvn9gjzo4hjg+wzIKG7iNFEaBMX00Qd4QIZs7+w=
+go.opentelemetry.io/otel/metric v1.30.0/go.mod h1:aXTfST94tswhWEb+5QjlSqG+cZlmyXy/u8jFpor3WqQ=
 go.opentelemetry.io/otel/sdk v1.24.0 h1:YMPPDNymmQN3ZgczicBY3B6sf9n62Dlj9pWD3ucgoDw=
 go.opentelemetry.io/otel/sdk v1.24.0/go.mod h1:KVrIYw6tEubO9E96HQpcmpTKDVn9gdv35HoYiQWGDFg=
-go.opentelemetry.io/otel/trace v1.29.0 h1:J/8ZNK4XgR7a21DZUAsbF8pZ5Jcw1VhACmnYt39JTi4=
-go.opentelemetry.io/otel/trace v1.29.0/go.mod h1:eHl3w0sp3paPkYstJOmAimxhiFXPg+MMTlEh3nsQgWQ=
-golang.org/x/net v0.28.0 h1:a9JDOJc5GMUJ0+UDqmLT86WiEy7iWyIhz8gz8E4e5hE=
-golang.org/x/net v0.28.0/go.mod h1:yqtgsTWOOnlGLG9GFRrK3++bGOUEkNBoHZc8MEDWPNg=
+go.opentelemetry.io/otel/trace v1.30.0 h1:7UBkkYzeg3C7kQX8VAidWh2biiQbtAKjyIML8dQ9wmc=
+go.opentelemetry.io/otel/trace v1.30.0/go.mod h1:5EyKqTzzmyqB9bwtCCq6pDLktPK6fmGf/Dph+8VI02o=
+golang.org/x/net v0.29.0 h1:5ORfpBpCs4HzDYoodCDBbwHzdR5UrLBZ3sOnUJmFoHo=
+golang.org/x/net v0.29.0/go.mod h1:gLkgy8jTGERgjzMic6DS9+SP0ajcu6Xu3Orq/SpETg0=
 golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ=
 golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
diff --git a/management.yml b/management.yml
index d595bd17..69ab53b2 100644
--- a/management.yml
+++ b/management.yml
@@ -15,7 +15,7 @@ info:
   license:
     name: Apache 2.0
     url: https://www.apache.org/licenses/LICENSE-2.0.html
-  version: 0.26.30
+  version: 0.26.31
 host: demo.ziti.dev
 basePath: /edge/management/v1
 paths:
@@ -16314,6 +16314,8 @@ definitions:
     required:
     - provider
     properties:
+      clientId:
+        type: string
       format:
         $ref: '#/definitions/mfaFormats'
       httpMethod:
@@ -16326,6 +16328,10 @@ definitions:
         type: integer
       provider:
         $ref: '#/definitions/mfaProviders'
+      scopes:
+        type: array
+        items:
+          type: string
       typeId:
         type: string
   authQueryList:
diff --git a/rest_client_api_server/doc.go b/rest_client_api_server/doc.go
index 0900ae3c..dc38d7d9 100644
--- a/rest_client_api_server/doc.go
+++ b/rest_client_api_server/doc.go
@@ -30,7 +30,7 @@
 //    https
 //  Host: demo.ziti.dev
 //  BasePath: /edge/client/v1
-//  Version: 0.26.30
+//  Version: 0.26.31
 //  License: Apache 2.0 https://www.apache.org/licenses/LICENSE-2.0.html
 //  Contact: OpenZiti<help@openziti.org> https://openziti.discourse.group
 //
diff --git a/rest_client_api_server/embedded_spec.go b/rest_client_api_server/embedded_spec.go
index 188871fe..23df3c45 100644
--- a/rest_client_api_server/embedded_spec.go
+++ b/rest_client_api_server/embedded_spec.go
@@ -64,7 +64,7 @@ func init() {
       "name": "Apache 2.0",
       "url": "https://www.apache.org/licenses/LICENSE-2.0.html"
     },
-    "version": "0.26.30"
+    "version": "0.26.31"
   },
   "host": "demo.ziti.dev",
   "basePath": "/edge/client/v1",
@@ -5289,6 +5289,9 @@ func init() {
         "provider"
       ],
       "properties": {
+        "clientId": {
+          "type": "string"
+        },
         "format": {
           "$ref": "#/definitions/mfaFormats"
         },
@@ -5307,6 +5310,12 @@ func init() {
         "provider": {
           "$ref": "#/definitions/mfaProviders"
         },
+        "scopes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
         "typeId": {
           "type": "string"
         }
@@ -7672,7 +7681,7 @@ func init() {
       "name": "Apache 2.0",
       "url": "https://www.apache.org/licenses/LICENSE-2.0.html"
     },
-    "version": "0.26.30"
+    "version": "0.26.31"
   },
   "host": "demo.ziti.dev",
   "basePath": "/edge/client/v1",
@@ -12979,6 +12988,9 @@ func init() {
         "provider"
       ],
       "properties": {
+        "clientId": {
+          "type": "string"
+        },
         "format": {
           "$ref": "#/definitions/mfaFormats"
         },
@@ -12997,6 +13009,12 @@ func init() {
         "provider": {
           "$ref": "#/definitions/mfaProviders"
         },
+        "scopes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
         "typeId": {
           "type": "string"
         }
diff --git a/rest_management_api_server/doc.go b/rest_management_api_server/doc.go
index e2278eda..749e48f5 100644
--- a/rest_management_api_server/doc.go
+++ b/rest_management_api_server/doc.go
@@ -30,7 +30,7 @@
 //    https
 //  Host: demo.ziti.dev
 //  BasePath: /edge/management/v1
-//  Version: 0.26.30
+//  Version: 0.26.31
 //  License: Apache 2.0 https://www.apache.org/licenses/LICENSE-2.0.html
 //  Contact: OpenZiti<help@openziti.org> https://openziti.discourse.group
 //
diff --git a/rest_management_api_server/embedded_spec.go b/rest_management_api_server/embedded_spec.go
index 925e056d..4703a759 100644
--- a/rest_management_api_server/embedded_spec.go
+++ b/rest_management_api_server/embedded_spec.go
@@ -64,7 +64,7 @@ func init() {
       "name": "Apache 2.0",
       "url": "https://www.apache.org/licenses/LICENSE-2.0.html"
     },
-    "version": "0.26.30"
+    "version": "0.26.31"
   },
   "host": "demo.ziti.dev",
   "basePath": "/edge/management/v1",
@@ -22560,6 +22560,9 @@ func init() {
         "provider"
       ],
       "properties": {
+        "clientId": {
+          "type": "string"
+        },
         "format": {
           "$ref": "#/definitions/mfaFormats"
         },
@@ -22578,6 +22581,12 @@ func init() {
         "provider": {
           "$ref": "#/definitions/mfaProviders"
         },
+        "scopes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
         "typeId": {
           "type": "string"
         }
@@ -28517,7 +28526,7 @@ func init() {
       "name": "Apache 2.0",
       "url": "https://www.apache.org/licenses/LICENSE-2.0.html"
     },
-    "version": "0.26.30"
+    "version": "0.26.31"
   },
   "host": "demo.ziti.dev",
   "basePath": "/edge/management/v1",
@@ -51109,6 +51118,9 @@ func init() {
         "provider"
       ],
       "properties": {
+        "clientId": {
+          "type": "string"
+        },
         "format": {
           "$ref": "#/definitions/mfaFormats"
         },
@@ -51127,6 +51139,12 @@ func init() {
         "provider": {
           "$ref": "#/definitions/mfaProviders"
         },
+        "scopes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
         "typeId": {
           "type": "string"
         }
diff --git a/rest_model/auth_query_detail.go b/rest_model/auth_query_detail.go
index bd8d783f..15c58527 100644
--- a/rest_model/auth_query_detail.go
+++ b/rest_model/auth_query_detail.go
@@ -43,6 +43,9 @@ import (
 // swagger:model authQueryDetail
 type AuthQueryDetail struct {
 
+	// client Id
+	ClientID string `json:"clientId,omitempty"`
+
 	// format
 	Format MfaFormats `json:"format,omitempty"`
 
@@ -62,6 +65,9 @@ type AuthQueryDetail struct {
 	// Required: true
 	Provider *MfaProviders `json:"provider"`
 
+	// scopes
+	Scopes []string `json:"scopes"`
+
 	// type Id
 	TypeID string `json:"typeId,omitempty"`
 }
diff --git a/source/client.yml b/source/client.yml
index dff6b416..23c9330c 100644
--- a/source/client.yml
+++ b/source/client.yml
@@ -1,7 +1,7 @@
 ---
 swagger: '2.0'
 info:
-  version: 0.26.30
+  version: 0.26.31
   title: Ziti Edge Client
   description: OpenZiti Edge Client API
   contact:
diff --git a/source/management.yml b/source/management.yml
index 6053e523..80d973e1 100644
--- a/source/management.yml
+++ b/source/management.yml
@@ -1,7 +1,7 @@
 ---
 swagger: '2.0'
 info:
-  version: 0.26.30
+  version: 0.26.31
   title: Ziti Edge Management
   description: OpenZiti Edge Management API
   contact:
diff --git a/source/shared/auth-query.yml b/source/shared/auth-query.yml
index 2ea42295..b347dde2 100644
--- a/source/shared/auth-query.yml
+++ b/source/shared/auth-query.yml
@@ -22,4 +22,10 @@ definitions:
       maxLength:
         type: integer
       format:
-        $ref: 'current-identity-mfa.yml#/definitions/mfaFormats'
\ No newline at end of file
+        $ref: 'current-identity-mfa.yml#/definitions/mfaFormats'
+      scopes:
+        type: array
+        items:
+          type: string
+      clientId:
+        type: string
\ No newline at end of file