# How to Stop Receiving Webhooks From Dormant Users

**URL:** <https://devforum.zoom.us/t/how-to-stop-receiving-webhooks-from-dormant-users/137454>\
**Category:** API and Webhooks\
**Tags:** phone, webhooks\
**Created:** [September 17, 2025, 8:44pm UTC](https://devforum.zoom.us/t/how-to-stop-receiving-webhooks-from-dormant-users/137454 "2025-09-17T20:44:15Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Abedellah](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/abedellah/32/69463_2.png) [@Abedellah](https://devforum.zoom.us/u/Abedellah)\
**Post date:** [September 17, 2025, 8:44pm UTC](https://devforum.zoom.us/t/how-to-stop-receiving-webhooks-from-dormant-users/137454/1 "2025-09-17T20:44:15Z")

</div>

I’m receiving webhook events from dormant users who don’t use our app. We rely solely on webhooks (no token storage — only one API call on signup to fetch user info). I’ve seen others mention this issue in the forum, but it’s unclear if revoking a user’s access token would stop these events. Since we don’t store tokens, that’s not an option for us.

What’s the recommended way to stop receiving events from specific users? Can Zoom unsubscribe them on your side?

Thanks,

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [September 17, 2025, 9:01pm UTC](https://devforum.zoom.us/t/how-to-stop-receiving-webhooks-from-dormant-users/137454/2 "2025-09-17T21:01:13Z")

</div>

Hi @Abedellah ,

Use endpoint `get/marketplace/app/event_subscription`to get event subscription id for specific users/account:

> **[Marketplace APIs](https://developers.zoom.us/docs/api/marketplace/#tag/app/get/marketplace/app/event_subscription)**
>
> The Marketplace APIs allow developers to access data related to their app and its usage in the marketplace.

Then use that event subscription id and account id as query parameters for the endpoint `delete/marketplace/app/event_subscription` to unsubscribe the user from events:

> **[Marketplace APIs](https://developers.zoom.us/docs/api/marketplace/#tag/app/delete/marketplace/app/event_subscription)**
>
> The Marketplace APIs allow developers to access data related to their app and its usage in the marketplace.

---

<div class="post-metadata">

**Author:** ![Abedellah](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/abedellah/32/69463_2.png) [@Abedellah](https://devforum.zoom.us/u/Abedellah)\
**Post date:** [September 18, 2025, 5:18pm UTC](https://devforum.zoom.us/t/how-to-stop-receiving-webhooks-from-dormant-users/137454/4 "2025-09-18T17:18:25Z")

</div>

We don’t store users access tokens. The users we want to unsubscribe are inactive. We still get their webhooks even though they don’t use our service anymore. These api endpoints seem to require an access token.

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [September 18, 2025, 7:55pm UTC](https://devforum.zoom.us/t/how-to-stop-receiving-webhooks-from-dormant-users/137454/5 "2025-09-18T19:55:48Z")

</div>

@Abedellah use your access token generated as the app developer. It will allow you to get specific information related to app usage from the users who have installed your app.

---

<div class="post-metadata">

**Author:** ![Abedellah](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/abedellah/32/69463_2.png) [@Abedellah](https://devforum.zoom.us/u/Abedellah)\
**Post date:** [September 18, 2025, 8:28pm UTC](https://devforum.zoom.us/t/how-to-stop-receiving-webhooks-from-dormant-users/137454/6 "2025-09-18T20:28:03Z")

</div>

I don’t understand why I as the developer have to jump through hoops to unsub inactive users? Is the only way to get an access token is by signing in to my app using zoom auth and capturing an auth code, then making an api call to get the token?

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [September 18, 2025, 9:06pm UTC](https://devforum.zoom.us/t/how-to-stop-receiving-webhooks-from-dormant-users/137454/7 "2025-09-18T21:06:11Z")

</div>

Hi @Abedellah ,

Perhaps there’s a way to do it via the admin portal, but I can’t walk you through that because I don’t have visibility into the published app portal at this time. @virginie.zoom @catalina.diaz @nigel.hughey would you be able to chime in here?

> [@Abedellah](#):
>
> Is the only way to get an access token is by signing in to my app using zoom auth and capturing an auth code, then making an api call to get the token?

Your app should already be authorized since it is active, so you don’t need to grab the auth code. You would just [use your refresh token to generate a new one](https://developers.zoom.us/docs/integrations/oauth/#refresh-an-access-token). However, if you need to authorize completely, follow [these steps](https://developers.zoom.us/docs/integrations/oauth/#request-an-access-token).

---

<div class="post-metadata">

**Author:** ![Abedellah](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/abedellah/32/69463_2.png) [@Abedellah](https://devforum.zoom.us/u/Abedellah)\
**Post date:** [September 18, 2025, 10:15pm UTC](https://devforum.zoom.us/t/how-to-stop-receiving-webhooks-from-dormant-users/137454/8 "2025-09-18T22:15:20Z")

</div>

Getting this error when trying to use my access token

message: 'Invalid access token, does not contain scopes:[marketplace:read:list\_event\_subscriptions]

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [September 19, 2025, 4:48am UTC](https://devforum.zoom.us/t/how-to-stop-receiving-webhooks-from-dormant-users/137454/9 "2025-09-19T04:48:56Z")

</div>

@Abedellah Ok, please add that scope to your app under “scopes”.

---

<div class="post-metadata">

**Author:** ![Abedellah](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/abedellah/32/69463_2.png) [@Abedellah](https://devforum.zoom.us/u/Abedellah)\
**Post date:** [September 19, 2025, 11:38am UTC](https://devforum.zoom.us/t/how-to-stop-receiving-webhooks-from-dormant-users/137454/10 "2025-09-19T11:38:56Z")

</div>

![Screenshot 2025-09-19 at 12.25.24 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/0/e/0e4fc96fe17f693990251d19646c88bce296d11b.png)

That scope is nowhere to be found. I added every single marketplace scope and still getting the same error. Can someone reach out over email to help us figure this out?

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [September 19, 2025, 9:34pm UTC](https://devforum.zoom.us/t/how-to-stop-receiving-webhooks-from-dormant-users/137454/11 "2025-09-19T21:34:53Z")

</div>

Hi @Abedellah just sent you a private message to get a bit more info. Please check your notifications on here.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [September 23, 2026, 1:11pm UTC](https://devforum.zoom.us/t/how-to-stop-receiving-webhooks-from-dormant-users/137454/12 "2026-09-23T13:11:23Z")

</div>

Closed on September 23, 2026, 1:11pm UTC

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.
