You should include a space between : and OAuth
Also for Helix, it’s Bearer Not OAuth
No scopes are required for this endpoint
The URL is JUST https://api.twitch.tv/helix/streams?first=1
This’ll return the Top 1 Stream.
Helix does not require this header.
It’s Client-ID not client_id
Is your token still valid?
Documentation for endpoint