Zoomtopia is here. Unlock the transformative power of generative AI, helping you connect, collaborate, and Work Happy with AI Companion.
Register nowEmpowering you to increase productivity, improve team effectiveness, and enhance skills.
Learn moreKeep your Zoom app up to date to access the latest features.
Download Center Download the Zoom appDownload hi-res images and animations to elevate your next Zoom meeting.
Browse Backgrounds Zoom Virtual BackgroundsEmpowering you to increase productivity, improve team effectiveness, and enhance skills.
Zoom AI CompanionUser groups are unique spaces where community members can collaborate, network, and exchange knowledge on similar interests and expertise.
Help & Resources is your place to discover helpful Zoom support resources, browse Zoom Community how-to documentation, and stay updated on community announcements.
The Events page is your destination for upcoming webinars, platform training sessions, targeted user events, and more. Stay updated on opportunities to enhance your skills and connect with fellow Zoom users.
2025-05-28 05:46 AM
Hi all,
I'm having trouble with the Zoom API and could use some help. I've created a Zoom Marketplace app with a wide range of permissions and can successfully complete the server-to-server oauth login and make some basic API requests.
However, I'm running into an issue with account-level API calls (e.g., GET /accounts/*). Zoom responds with a scope-related error:
{
"code": 4711,
"message": "Invalid access token, does not contain scopes:[meeting:read:meeting:master]"
}
I have double-checked that this scope (meeting:read:meeting:master) is enabled in the app configuration, and I can also see it included in the /oauth/token response.
What could be causing this? Are there specific requirements for either:
The app itself (e.g., app type or configuration)?
The user creating the app and collecting the client ID/secret?
For context, I’m an admin on the Zoom account, but not the owner. I assumed being an admin would be sufficient to authorize account-level API requests — is that incorrect?
Appreciate any insights, thanks!