Do we have any OOB Support for adding/validating Scope for APIs built in pega? Service-REST or Service-JMS

Or is this something that has to be handled as a query string parameter??

By Scope, I mean the oAuth API Scopes that are typically mapped to client applications and at run time the API checks for required scopes vs the scope possessed by the calling application to decide whether or not to honor the request