setup-zoom-oauth
anthropics/knowledge-work-plugins
Set up Zoom OAuth authentication with the correct grant flow, scopes, and token handling.
What is setup-zoom-oauth?
This skill guides you through implementing Zoom authentication by selecting the right app type, OAuth grant, and scopes for your use case. Use it when setting up app credentials, choosing between grant flows, planning scope requests, handling token refresh, or debugging authentication failures.
- Determine app model and authorization actor/tenant relationships
- Select the correct OAuth grant flow for your integration
- Identify minimum required scopes for your user workflow
- Define token storage and refresh token lifecycle behavior
- Debug authentication failures and validate environment configuration
How to install setup-zoom-oauth
npx skills add https://github.com/anthropics/knowledge-work-plugins --skill setup-zoom-oauthHow to use setup-zoom-oauth
- 1.Clarify your app model: determine who is authorizing (user, service account, or admin) and what resource they are accessing
- 2.Choose your OAuth grant flow based on the actor model (e.g., authorization code for user delegation, client credentials for server-to-server)
- 3.List the minimum scopes required for your specific workflow; avoid requesting broad permissions upfront
- 4.Plan token storage and refresh behavior, including how to handle newly returned refresh tokens after each refresh
- 5.Test your configuration against Zoom's app settings and environment variables, then route to deeper API or OAuth references as needed
Use cases
- Setting up a Zoom app with server-to-server authentication for automated workflows
- Implementing user-delegated OAuth for a web app that accesses Zoom on behalf of users
- Configuring scope requests to minimize permissions while meeting functional requirements
- Troubleshooting token refresh failures or expired credential issues
- Validating app configuration and environment variables before testing API calls
- Backend developers building Zoom integrations
- Full-stack engineers setting up OAuth flows for the first time
- DevOps engineers configuring Zoom app credentials and secrets
- Integration engineers debugging authentication issues
setup-zoom-oauth FAQ
Use server-to-server when your app acts on its own behalf (e.g., scheduled reports or admin tasks). Use authorization code when your app needs to act on behalf of individual users and requires their explicit consent.
Reusing an old refresh token after a successful refresh instead of storing the newly returned refresh token. Always update your stored token with the new one returned by the token endpoint.
Start by mapping your exact user workflow (e.g., 'read meeting details' or 'create recordings'), then request only the minimum scopes needed. Avoid broad scopes upfront; you can always add more later.
Check that your app credentials (client ID and secret) are correct, your refresh token hasn't expired, and your environment variables are properly set. Verify these before assuming it's an API issue.
This skill covers token lifecycle planning; for secure storage implementation details, consult your backend framework's documentation or the general security references.
Full instructions (SKILL.md)
Source of truth, from anthropics/knowledge-work-plugins.
name: setup-zoom-oauth description: Implement Zoom authentication correctly. Use when setting up app credentials, choosing an OAuth grant, requesting scopes, handling token refresh, or debugging auth failures.
/setup-zoom-oauth
Use this skill when auth is the blocker or when auth choices will shape the entire integration.
Scope
- App type selection
- OAuth grant selection
- Scope planning
- Token exchange and refresh
- Auth debugging and environment assumptions
Workflow
- Determine the app model and who is authorizing whom.
- Choose the correct grant flow.
- Identify minimum scopes for the user flow.
- Define token storage and refresh behavior.
- Route into the deepest relevant reference docs only after the above is clear.
Primary References
- oauth
- general
- rest-api
Common Mistakes
- Picking a grant before clarifying the actor and tenant model
- Asking for broad scopes before confirming the exact workflow
- Forgetting refresh-token behavior and token lifecycle handling
- Reusing an old refresh token after a successful refresh instead of storing the newly returned one
- Treating auth failures as API failures without checking app configuration first
Related skills
More from anthropics/knowledge-work-plugins and the wider catalog.
setup-zoom-webhooks
Reference for implementing Zoom webhooks with signature verification and event subscriptions.
setup-zoom-websockets
Set up persistent Zoom WebSocket connections for low-latency event delivery as an alternative to webhooks.
signature-request
Prepare and route documents for e-signature with pre-flight checks and signing order configuration.
single-cell-rna-qc
Automated QC for single-cell RNA-seq data with MAD-based filtering and scverse best practices.
slack-messaging
Guidance for composing well-formatted, effective Slack messages using mrkdwn syntax
slack-search
Find messages, files, channels, and people in Slack with effective search strategies and modifiers.