# invalid access token does not contain scope{webhook:admin write/read}

**URL:** <https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scope-webhook-admin-write-read/1759>\
**Category:** API and Webhooks\
**Created:** [September 22, 2018, 2:32pm UTC](https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scope-webhook-admin-write-read/1759 "2018-09-22T14:32:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vikas\_Jha](https://avatars.discourse-cdn.com/v4/letter/v/7c8e57/32.png) [@Vikas\_Jha](https://devforum.zoom.us/u/Vikas_Jha)\
**Post date:** [September 22, 2018, 2:32pm UTC](https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scope-webhook-admin-write-read/1759/1 "2018-09-22T14:32:32Z")

</div>

creating webhook having post method which having auth\_user and auth\_pass fields and i dont know what to put in this fields i tried putting my client\_id and client\_secret as auth\_user and auth\_pass respectively but now m getting invalid access token does not having scope{webhook admin read write} although i m building app from marketplace and i did provide the all scopes…

&nbsp;

---

<div class="post-metadata">

**Author:** ![michael\_p.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_p.zoom/32/18105_2.png) [@michael\_p.zoom](https://devforum.zoom.us/u/michael_p.zoom)\
**Post date:** [September 24, 2018, 9:03pm UTC](https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scope-webhook-admin-write-read/1759/2 "2018-09-24T21:03:08Z")

</div>

Hi Vikas,&nbsp;

When building your app through the marketplace are you following these steps when within our marketplace docs ([https://devdocs.zoom.us/docs/zoom-app-marketplace/webhooks](https://devdocs.zoom.us/docs/zoom-app-marketplace/webhooks))?

You shouldn’t be using auth\_user & auth\_pass.&nbsp;

Thanks

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 5:55pm UTC](https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scope-webhook-admin-write-read/1759/3 "2020-08-21T17:55:43Z")

</div>