Access token always invalid

Yeah thats expected, never leak those bearers.

But ClientID’s are public.

I don’t see anything wrong with your calls since they are just pure cURL

Whats the URL you construct to validate your bot to have scopes on your channel?