Build Zoom Rest API App

From the author

Use when calling REST APIs.

— the description by Zoom

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

This skill provides a structured approach to interacting with the Zoom REST API. It offers guidance on selecting appropriate authentication flows, managing resources such as meetings and users, and implementing robust API interaction patterns like pagination and rate-limit handling. It includes reference documentation for various Zoom product areas, including account management and AI Companion services, to assist developers in building API-integrated applications.

What it does

Provides endpoint inventories for Zoom API product areas.
Outlines authentication requirements for user-level, account-level, and server-to-server workflows.
Defines patterns for implementing API wrappers with pagination and retry logic.
Offers guidance on webhook processing, including signature verification.
Assists in troubleshooting common API issues like scope mismatches and rate limits.

When to use it

When developing applications that need to programmatically manage Zoom meetings, users, or recordings.
When integrating Zoom account settings or dashboard metrics into custom software.
When setting up event-driven workflows using Zoom webhooks.
When debugging authentication or scope-related errors during Zoom API integration.

Advantages

Centralizes access to official Zoom API endpoint documentation.
Standardizes the implementation of API interaction patterns.
Clarifies the selection of correct authentication scopes for different API operations.
Provides a clear methodology for handling API rate limits and resource management.

Usage examples

“How do I list meeting participants using the Zoom API?”: The agent provides the correct endpoint path from the dashboard references and explains the necessary OAuth scopes and pagination requirements.
“What authentication should I use for an account-level Zoom integration?”: The agent guides you through the account-level OAuth flow requirements as defined in the authentication documentation.

Install

Download the skill as a ZIP:
https://mp-staging.autogineer.com/agent-skills/openai/build-zoom-rest-api-app/download

Unzip it into the cross-client skills folder of your project:

mkdir -p .agents/skills && unzip build-zoom-rest-api-app.zip -d .agents/skills

Documentation by Zoom

Use this skill when the task needs deterministic Zoom API calls or resource management from application code.

Workflow

Define the resource and actor: user, meeting, webinar, recording, docs, chat, phone, account, or admin-level workflow.
Select the endpoint and required scopes from the reference files before coding.
Confirm auth fit: user-level OAuth for user-owned resources, account-level OAuth for admin workflows, and only use server-to-server OAuth where the target API documents support for it.
Implement narrow API wrappers with explicit pagination, retry, idempotency, and rate-limit handling.
Treat webhook processing as a separate event-ingestion path with signature verification and replay protection.
Debug by checking token audience, missing scopes, resource ownership, account settings, API enablement, and rate-limit headers.

References

Full preserved guide: references/full-guide.md
API architecture: concepts/api-architecture.md
Authentication flows: concepts/authentication-flows.md
Rate limits: references/rate-limits.md
Meetings: references/meetings.md
Recordings: references/recordings.md
Users: references/users.md
Token and scope playbook: troubleshooting/token-scope-playbook.md

Files

ATTRIBUTION.mdAdded by AutoGineer878 B
LICENSELicence file added by AutoGineer1.1 KiB
RUNBOOK.md3.1 KiB
SKILL.md1.6 KiB
agents/openai.yaml143 B
concepts/api-architecture.md8.9 KiB
concepts/authentication-flows.md9.1 KiB
concepts/meeting-urls-and-sdk-joining.md1.2 KiB
concepts/rate-limiting-strategy.md9.6 KiB
examples/graphql-queries.md465 B
examples/meeting-lifecycle.md14.6 KiB
examples/recording-pipeline.md661 B
examples/user-management.md509 B
examples/webhook-server.md14.4 KiB
references/accounts.md7.5 KiB
references/ai-companion.md1.2 KiB
references/ai-services.md1.5 KiB
references/authentication.md11.0 KiB
references/auto-dialer.md2.6 KiB
references/calendar.md4.9 KiB
references/chatbot.md1.4 KiB
references/clips.md2.9 KiB
references/cobrowse-sdk-api.md1.4 KiB
references/commerce.md5.8 KiB
references/contact-center.md33.1 KiB
references/crc.md3.5 KiB
references/environment-variables.md976 B
references/events.md13.0 KiB
references/full-guide.md25.5 KiB
references/graphql.md8.9 KiB
references/healthcare.md1.3 KiB
references/mail.md6.9 KiB
references/marketplace-apps.md4.0 KiB
references/meetings.md21.3 KiB
references/number-management.md4.8 KiB
references/openapi.md4.4 KiB
references/phone.md45.9 KiB
references/qss.md1.6 KiB
references/quality-management.md1.7 KiB
references/rate-limits.md9.9 KiB
references/recordings.md1.4 KiB
references/reports.md1.2 KiB
references/revenue-accelerator.md9.4 KiB
references/rooms.md15.3 KiB
references/scheduler.md3.8 KiB
references/scim2.md1.9 KiB
references/tasks.md2.6 KiB
references/team-chat.md13.5 KiB
references/users.md7.3 KiB
references/video-management.md4.0 KiB
references/video-sdk-api.md5.3 KiB
references/virtual-agent.md2.2 KiB
references/webinars.md1.2 KiB
references/whiteboard.md5.3 KiB
references/workforce-management.md3.1 KiB
references/zoom-docs.md3.2 KiB
troubleshooting/common-errors.md11.6 KiB
troubleshooting/common-issues.md650 B
troubleshooting/forum-top-questions.md1.7 KiB
troubleshooting/token-scope-playbook.md1.5 KiB

troubleshooting/token-scope-playbook.md

title: "Token + Scope Playbook (Invalid Access Token / Missing Scopes)"

Token + Scope Playbook (Invalid Access Token / Missing Scopes)

This covers the most common REST API forum failures:

401 / 403
"Invalid access token"
"does not contain scopes"
"Access token is expired"

Step 1: Identify the OAuth App Type

Server-to-Server OAuth: backend automation, no user consent screen
User OAuth (authorization_code / PKCE): per-user actions, user consent

Wrong app type is the #1 cause of “token works for endpoint A but not endpoint B”.

Step 2: Verify `me` Keyword Rules

User OAuth: use users/me/...
S2S OAuth: do not use me (use a real userId/email where required)

If they get 1001 user does not exist or “invalid access token” on users/{id} calls, this is often the reason.

Step 3: Confirm Scopes Match the Endpoint

If the error says missing scopes, you must:

enable the scopes in Marketplace for the app
obtain a new token (tokens won’t gain scopes retroactively)

Step 4: Token Expiry and Refresh

S2S OAuth access tokens expire quickly; refresh on the server and cache with a buffer.
User OAuth: refresh tokens and retry on code=201 “Access token is expired.”

Step 5: Confirm the Token’s Account/App

If tokens are created from multiple environments (dev/stage/prod) or accounts, mixups happen.

Ask for:

the app type
the account id (human-readable)
the exact endpoint being called

Requirements and compatibility

Written for: OpenAI Codex

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Security

What our scanner noticed· Medium risk

Possible data-exfiltration endpoints
Instructions that use the network

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Implement Spec
Matt Pocock· Community
A workflow for implementing technical specifications and tickets using concurrent subagents.
Software developmentClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository317.5k
MCP Builder
AnthropicOfficial
A comprehensive guide for building high-quality Model Context Protocol (MCP) servers to integrate external services with LLMs.
Software developmentClaude CodeClaude appsOpenAI Codex+14 more
Apache-2.0Low riskHas scriptsGitHub stars of the source repository188.6k
Schema
Corey Haines· Community
Expert guidance for implementing and optimizing JSON-LD schema markup to improve search engine content understanding.
Software developmentClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository59k
Postgresql Table Design
Seth Hobson· Community
A comprehensive guide for designing, reviewing, and optimizing PostgreSQL database schemas.
Software developmentClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository42.3k
SQL Optimization Patterns
Seth Hobson· Community
A comprehensive guide to optimizing SQL database performance through indexing, query plan analysis, and efficient coding patterns.
Software developmentClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository42.3k
API Scaffolding Fastapi Pro
Seth Hobson· Community
An expert FastAPI developer focused on high-performance, async-first API architecture and production-ready microservices.
Software developmentClaude Code
MITGitHub stars of the source repository42.3k

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download build-zoom-rest-api-app.zip