{"registry_version":"2026.1025.387","generated_at":"2026-10-25T06:27:00Z","content_sha256":"089d16f627d9365e3d0663cc8069203706d7cb23a76c332226e29686968811a5","signed":true,"signature":{"key_id":"ed25519:74ca19268e364242","algorithm":"ed25519","expires_at":"2026-11-24T06:27:09Z","expired":false,"manifest":"/registry/manifest.json"},"entry_sha256":"e8ab4728e9eb09fa7da16248bfa23ee145103f2af0f9d1364d88379c3d55d6ed","entry":{"id":"zoom/app-marketplace","name":"Zoom App Marketplace app (General app or Server-to-Server OAuth)","vendor":"Zoom","summary":"Build a Server-to-Server OAuth app for your own account, or a General (OAuth) app for other Zoom users; public or unlisted General apps must pass Zoom's App Marketplace review including a security review.","category":"messaging","group":"C","homepage":"https://developers.zoom.us","docs":["https://developers.zoom.us/docs/integrations/create/","https://developers.zoom.us/docs/internal-apps/create/","https://developers.zoom.us/docs/distribute/app-review-process/"],"status":"researched","last_verified":null,"last_researched":"2026-10-25","sources":[{"id":"general_app","url":"https://developers.zoom.us/docs/integrations/create/","title":"Create an OAuth app","accessed":"2026-10-25","supports":"Marketplace > Develop > Build an app > General app; admin-managed vs user-managed; redirect URL and allow list; development vs production client ID/secret; scopes with descriptions (Security Review may reject unnecessary ones); Local Test; beta apps limited to the developer's account.","kind":"official"},{"id":"s2s_app","url":"https://developers.zoom.us/docs/internal-apps/create/","title":"Create a Server-to-Server OAuth app","accessed":"2026-10-25","supports":"Needs role permission for S2S apps and each scope; App credentials show account ID, client ID, secret; developer contact required; app must be activated before tokens work; deactivation stops tokens.","kind":"official"},{"id":"review","url":"https://developers.zoom.us/docs/distribute/app-review-process/","title":"App Review Process","accessed":"2026-10-25","supports":"Public and unlisted apps are reviewed; private and beta apps are not; stages: completeness and branding, functionality/usability/compliance, security review (technical design, scopes, OWASP Top 10 testing), remediation, ongoing monitoring; no fixed timeline.","kind":"official"}],"allowed_domains":["marketplace.zoom.us"],"account_model":{"summary":"Apps are built under a Zoom account in the App Marketplace; S2S apps act on that account only.","accounts":[{"name":"Zoom account","kind":"organisation","required":true,"note":"Your role must allow creating Server-to-Server OAuth apps and granting admin-level scopes."}]},"have_ready":[{"kind":"other","description":"Technical design documentation (architecture, security controls, use of each scope) for review","needed_for":["submit_review"],"auto_check":"none","source":"review"}],"steps":[{"id":"s2s_create","title":"Create a Server-to-Server OAuth app (your own account)","summary":"Develop > Build an app > Server-to-Server OAuth; add scopes your role allows and the developer contact name and email.","route":"copilot","depends_on":[],"gate":"human_submit","url":"https://marketplace.zoom.us/develop/create","optional":true,"sources":["s2s_app"]},{"id":"s2s_activate","title":"Activate and copy credentials","summary":"Fix any activation errors and Activate; then copy the account ID, client ID and secret. Tokens can't be generated until the app is active.","route":"copilot","depends_on":["s2s_create"],"gate":"human_submit","url":"https://marketplace.zoom.us/user/build","capture":{"env":"ZOOM_CLIENT_SECRET","kind":"secret"},"sources":["s2s_app"]},{"id":"general_create","title":"Create a General app (other users' accounts)","summary":"Build an app > General app; choose admin-managed or user-managed; enter redirect URL and allow list; add scopes with a reason for each; test with Local Test using development credentials.","route":"copilot","depends_on":[],"gate":"human_submit","url":"https://marketplace.zoom.us/develop/create","optional":true,"sources":["general_app"]},{"id":"submit_review","title":"Submit for App Marketplace review (public/unlisted)","summary":"Complete the Technical Design section and listing, then submit. Zoom checks completeness and branding, functionality and compliance, then runs a security review (scopes, OWASP Top 10 testing). Switch to production credentials on approval.","route":"guided","depends_on":["general_create"],"gate":"third_party_review","url":"https://marketplace.zoom.us/user/build","lead_time":{"official":{"text":"No fixed timeline; depends on app quality, number of features, scope clarity and listing information.","source":"review"}},"recovery":[{"hiccup":"Review rejected with a remediation report","fix":"Complete every action item in the report and resubmit.","source":"review"}],"optional":true}],"outputs":[{"name":"ZOOM_ACCOUNT_ID","description":"Account ID (Server-to-Server OAuth)","secret":false,"example_format":"opaque id string","from_step":"s2s_activate"},{"name":"ZOOM_CLIENT_ID","description":"App client ID (development or production)","secret":false,"example_format":"opaque id string"},{"name":"ZOOM_CLIENT_SECRET","description":"App client secret","secret":true,"example_format":"opaque secret string"}],"terms_notes":[{"kind":"rules_say","severity":"amber","text":"Zoom's security review may reject scopes it considers unnecessary; request the minimum and describe why.","source":"general_app"},{"kind":"rules_say","severity":"yellow","text":"Published apps are monitored and may be temporarily removed if they pose significant risk.","source":"review"}],"pricing_notes":{"notes":"No fee to build apps stated on the pages reviewed [to verify]; API availability depends on the Zoom account plan [to verify].","source":"general_app"},"stripe_projects":false,"api_provisioning":{"available":"no","notes":"Apps are created in the App Marketplace web UI."}}}