Found the problem,
When I used cygwin to run the request in cURL, I got a much more informative error message.
`{“error”:”authorization_required”,”message”:”Access token does not have the required scope”}
This informed me that I didn’t have sufficient scope on my Access Token to list all of the sites. When I made a new token request, and specified the Global Scope, I’m now able ot list all sites the user has.
Hope this helps others.