Can't use phone webhook download_url

was told by Zoom that we only needed webhooks only app,and would be able to download recordings using the download_url in the phone.recording_completed event… this url, however, requires “?access_token=” to be added to the end - and I’ve tried passing both the app’s secret token and validation token, but both return “Invalid access token”… How? do I get an access token so that I can use the download_url in phone.recording_completed webhook events?