# Get app's user requests returns 403

**URL:** <https://devforum.zoom.us/t/get-apps-user-requests-returns-403/130123>\
**Category:** API and Webhooks\
**Tags:** marketplace, apps\
**Created:** [March 19, 2025, 8:02am UTC](https://devforum.zoom.us/t/get-apps-user-requests-returns-403/130123 "2025-03-19T08:02:27Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Marcel13](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/marcel13/32/68024_2.png) [@Marcel13](https://devforum.zoom.us/u/Marcel13)\
**Post date:** [March 19, 2025, 8:02am UTC](https://devforum.zoom.us/t/get-apps-user-requests-returns-403/130123/1 "2025-03-19T08:02:27Z")

</div>

**Description**  
I am trying to use the “Get an app’s user requests” API to retrieve user requests for an app in my Zoom account. However, I consistently receive a 403 Forbidden response with no response body.  
• I am using a valid OAuth access token with the required scope: marketplace:read:app\_request:admin.  
• The app ID I am querying belongs to my account. I tried all app IDs that I got from `GET https://api.zoom.us/v2/marketplace/apps`.  
• Other API requests with the same token (e.g., fetching app details) work correctly.

**Error**  
I receive a 403 Forbidden response with no response body.  
Response headers:

```auto
HTTP/1.1 403 Forbidden  
Date: Wed, 19 Mar 2025 07:52:37 GMT  
Content-Length: 0  
Connection: keep-alive  
x-zm-trackingid: v=2.0;sid=WEB_eed3e4aed3b666fc3a0ce274daa8fae0;rid=MP_ffaa8b6fc07065ee0df96f17a2c87207  
x-mkt-region: VA2  
x-ratelimit-category: Medium  
x-content-type-options: nosniff  
x-xss-protection: 0  
Cache-Control: no-cache, no-store, max-age=0, must-revalidate  
pragma: no-cache  
expires: 0  
strict-transport-security: max-age=31536000 ; includeSubDomains  
x-frame-options: DENY  
Server: cloudflare  

```

**How To Reproduce**  
_Steps to reproduce the behavior:_

1. \*\*Request URL \*\*: `GET https://api.zoom.us/v2/marketplace/apps/4FOX4jrzQD6cs12NngQvmQ/requests?page_size=30&status=approved `
2. **Headers (excluding credentials)** :

```auto
Accept: application/json  
Authorization: Bearer <token>  
User-Agent: PostmanRuntime/7.43.0  
Host: api.zoom.us  
Accept-Encoding: gzip, deflate, br  
Connection: keep-alive  

```

1. **Authentication Method** : OAuth 2.0
2. **Response** : 403 Forbidden with no response body

Can you confirm if there are any additional requirements for accessing this endpoint? Is there a reason why this request would be blocked despite having the required scope?

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 19, 2025, 11:26pm UTC](https://devforum.zoom.us/t/get-apps-user-requests-returns-403/130123/2 "2025-03-19T23:26:33Z")

</div>

Hi @Marcel13  
Can you please try calling this endpoint with an access token generated with the credentials that belong to that app and let me know if that works?

---

<div class="post-metadata">

**Author:** ![Marcel13](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/marcel13/32/68024_2.png) [@Marcel13](https://devforum.zoom.us/u/Marcel13)\
**Post date:** [March 20, 2025, 10:58am UTC](https://devforum.zoom.us/t/get-apps-user-requests-returns-403/130123/3 "2025-03-20T10:58:19Z")

</div>

Hi Elisa,

I followed your suggestion and ensured that I’m using an access token generated with the credentials of the app I’m querying. Here’s what I did:

1. I retrieved my apps using:  
`GET https://api.zoom.us/v2/marketplace/apps?page_size=30&type=account_added`

Response:

```json
{
    "apps": [
        {
            "app_id": "8l1ATL7CS0Ocu64GPNuF-g",
            "app_name": "Reco SaaS Security",
            "app_type": "OAuthApp",
            "app_usage": 1,
            "app_status": "PUBLISHED"
        },
        ...
    ],
    "next_page_token": "",
    "page_size": 30
}

```

The Reco SaaS Security app (app\_id: `8l1ATL7CS0Ocu64GPNuF-g`) is the one I’m using, and I verified that the access token belongs to this app.

1. I then made a request to:  
`GET https://api.zoom.us/v2/marketplace/apps/8l1ATL7CS0Ocu64GPNuF-g/requests?page_size=30&status=approved`

- Using the same access token associated with this app.
- Confirmed that the token has the required marketplace:read:app\_request:admin scope.
- Still receiving 403 Forbidden with no response body.

I also have some screenshots from the **Zoom App Marketplace** dashboard. With the scopes and the **Call Logs** with the failing request. But can’t upload them, I’m getting this error `An error occurred: Sorry, you can't embed media items in a post.`

Could you confirm if there are additional requirements to access this endpoint? Are there any account-level or app-level settings that might be blocking the request?

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 27, 2025, 8:55pm UTC](https://devforum.zoom.us/t/get-apps-user-requests-returns-403/130123/4 "2025-03-27T20:55:50Z")

</div>

Hey @Marcel13  
I apologize I did not get back to you sooner. Are you still having this issue?

---

<div class="post-metadata">

**Author:** ![Marcel13](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/marcel13/32/68024_2.png) [@Marcel13](https://devforum.zoom.us/u/Marcel13)\
**Post date:** [March 28, 2025, 6:45am UTC](https://devforum.zoom.us/t/get-apps-user-requests-returns-403/130123/5 "2025-03-28T06:45:35Z")

</div>

Hi Elisa,

Yes, I’m still getting 403 status with no response body when making requests to `GET https://api.zoom.us/v2/marketplace/apps/{app_id}/requests`.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 28, 2025, 12:49pm UTC](https://devforum.zoom.us/t/get-apps-user-requests-returns-403/130123/6 "2025-03-28T12:49:31Z")

</div>

Thanks for getting back to me.  
I just sent you a DM, follow up there please

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [April 8, 2025, 2:58pm UTC](https://devforum.zoom.us/t/get-apps-user-requests-returns-403/130123/7 "2025-04-08T14:58:20Z")

</div>

To update this thread  
We have identified that this is a bug on our end. We have to display error 404 Not found as there hasn’t been any install requests from the users for this app. If there are app authorization requests, then there will be a response.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [April 9, 2025, 2:59pm UTC](https://devforum.zoom.us/t/get-apps-user-requests-returns-403/130123/8 "2025-04-09T14:59:01Z")

</div>

Closed on April 9, 2025, 2:59pm UTC

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.