diff --git a/src/clients.js b/src/clients.js
index 4580e8e65..0f10251e9 100644
--- a/src/clients.js
+++ b/src/clients.js
@@ -98,12 +98,16 @@ function add(appId, type, redirectURI, scope, callback) {
     assert.strictEqual(typeof scope, 'string');
     assert.strictEqual(typeof callback, 'function');
 
+    // allow whitespace
+    scope = scope.split(',').map(function (s) { return s.trim(); }).join(',');
+
     var error = validateScope(scope);
     if (error) return callback(error);
 
     var id = 'cid-' + uuid.v4();
     var clientSecret = hat(256);
 
+
     clientdb.add(id, appId, type, clientSecret, redirectURI, scope, function (error) {
         if (error) return callback(error);