# Invalid API or Secret

**URL:** <https://devforum.zoom.us/t/invalid-api-or-secret/20197>\
**Category:** API and Webhooks\
**Created:** [June 3, 2020, 9:54pm UTC](https://devforum.zoom.us/t/invalid-api-or-secret/20197 "2020-06-03T21:54:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![joseph1](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/joseph1/32/9814_2.png) [@joseph1](https://devforum.zoom.us/u/joseph1)\
**Post date:** [June 3, 2020, 9:54pm UTC](https://devforum.zoom.us/t/invalid-api-or-secret/20197/1 "2020-06-03T21:54:27Z")

</div>

**Description**  
I have generated a basic authoriztion with the client id and secret id. When i use the bearer token to access the [https://api.zoom.us/v2/users/{userId}/meetings](https://api.zoom.us/v2/users/%7BuserId%7D/meetings) i get the  
{  
“code”: 200,  
“message”: “Invalid api key or secret.”  
}

**Error**  
{  
“code”: 200,  
“message”: “Invalid api key or secret.”  
}

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
OAuth

**Which Endpoint/s?**  
[https://api.zoom.us/v2/users/{userId}/meetings](https://api.zoom.us/v2/users/%7BuserId%7D/meetings)

**How To Reproduce (If applicable)**

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/a/a1a9dd26562ba98192a06d21a5293f01e2a03783.png)

**Additional context**

I can generated the bearer token successfully

---

<div class="post-metadata">

**Author:** ![michael.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael.zoom/32/37213_2.png) [@michael.zoom](https://devforum.zoom.us/u/michael.zoom)\
**Post date:** [June 6, 2020, 1:07am UTC](https://devforum.zoom.us/t/invalid-api-or-secret/20197/2 "2020-06-06T01:07:55Z")

</div>

Hi @joseph1, does this OAuth token have the correct installation and scopes assigned to this userId? Are you following the steps here in our OAuth documentation?

> **[OAuth 2.0 - Authorization - Documentation](https://marketplace.zoom.us/docs/guides/auth/oauth)**
>
> OAuth with Zoom
> 
> The Zoom API uses OAuth 2.0 to authenticate and authorize users to make requests. To setup access credentials and request scopes for yo...

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 9:54pm UTC](https://devforum.zoom.us/t/invalid-api-or-secret/20197/3 "2020-08-21T21:54:47Z")

</div>

Closed on August 21, 2020, 9:54pm UTC