# Cannot Obtain Auth Token for Account-Level App

**URL:** <https://devforum.zoom.us/t/cannot-obtain-auth-token-for-account-level-app/131201>\
**Category:** API and Webhooks\
**Created:** [April 8, 2025, 9:34pm UTC](https://devforum.zoom.us/t/cannot-obtain-auth-token-for-account-level-app/131201 "2025-04-08T21:34:50Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![afarmer](https://avatars.discourse-cdn.com/v4/letter/a/7c8e57/32.png) [@afarmer](https://devforum.zoom.us/u/afarmer)\
**Post date:** [April 8, 2025, 9:34pm UTC](https://devforum.zoom.us/t/cannot-obtain-auth-token-for-account-level-app/131201/1 "2025-04-08T21:34:50Z")

</div>

### **API Endpoint(s) and/or Zoom API Event(s)**

[GET /v2/meetings/:meetingId/recordings](https://marketplace.zoom.us/docs/api-reference/zoom-api/meetings/meetingrecordings)

### **Description**

I am trying to generate a valid access token for making API calls with my Account-Level “General” app to fetch meeting recordings (via the `/recordings` endpoint).

I have four apps connected to my Zoom account: three Server-to-Server OAuth apps (Account-Level) and one General (Account-Level) app. Using the S2S credentials, I am able to generate valid tokens and make requests to appropriate endpoints for those apps. However, when attempting to fetch recordings using the Account-level app, I run into issues generating a token for this specific app.

I suspect the account-level app may use a different OAuth flow compared to the S2S apps, but attempts to use its Client ID and Client Secret with the `/oauth/token` endpoint have failed. Previous calls for S2S to this endpoint have used an Account ID which I do not seem to have for this app.

My ultimate goal is to retrieve meeting recordings using the `/recordings` endpoint via my General app as it has greater scopes than my S2S are entitled to.

* * *

### **Error**

1. **Error Message:**  
When using the Account-level app’s Client ID and Client Secret to call `https://zoom.us/oauth/token`, I receive:

2. When using an access token generated from my Server-to-Server OAuth apps for the `/recordings` endpoint, I receive:

* * *

### **How To Reproduce**

**Step 1:** Generate an Access Token  
Request URL:

```plaintext
POST https://zoom.us/oauth/token  
Authorization: Basic base64Encode(clientId:clientSecret)  
Content-Type: application/x-www-form-urlencoded  
Body: grant_type=client_credentials  

```

App Type: General Account-Level  
Issue: Returns “invalid\_client” error.

**Step 2:** Call `/recordings` endpoint  
Request URL:

```plaintext
GET https://api.zoom.us/v2/meetings/:meetingId/recordings  
Headers:  
Authorization: Bearer {accessToken}  

```

Authentication Method: Access token generated using Server-to-Server OAuth app credentials.  
Issue: Returns “Invalid access token” error.

* * *

If anyone has insights on how to generate valid tokens for a General Account-Level app, that would be greatly appreciated! I’m specifically looking for the correct authentication flow for an app with only a `client_id` and `client_secret`.

---

<div class="post-metadata">

**Author:** ![expertswho](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/expertswho/32/60945_2.png) [@expertswho](https://devforum.zoom.us/u/expertswho)\
**Post date:** [April 9, 2025, 9:23am UTC](https://devforum.zoom.us/t/cannot-obtain-auth-token-for-account-level-app/131201/2 "2025-04-09T09:23:00Z")

</div>

hi @afarmer ,

Yes, server to server auth is different and more simple  
You need to request an access token  
have a look at

> **[GitHub - zoom/zoomapps-sample-js: A Hello World Zoom App built with Vanilla JS](https://github.com/zoom/zoomapps-sample-js)**
>
> A Hello World Zoom App built with Vanilla JS

all the best

John

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [April 13, 2026, 12:59am UTC](https://devforum.zoom.us/t/cannot-obtain-auth-token-for-account-level-app/131201/3 "2026-04-13T00:59:55Z")

</div>

Closed on April 13, 2026, 12:59am UTC

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.