I knew we documented it somewhere:

https://developer.okta.com/docs/concepts/api-access-manageme...