Audit accounts without two-step

[Winn Johnston]

I am looking for a way to audit the following products for users who have and have not enabled two-step authentication. Currently we are not using the identity manager and have no plan to begin.

Bit bucket 

Confluence

Jira

I have looked over the API guides for each but am unable to find the correct call. I am hoping someone in the community has done this before.