# Issue with user data API call – client credentials not supported **URL:** \ **Category:** API and Webhooks\ **Tags:** api\ **Created:** [October 1, 2025, 12:26pm UTC](https://devforum.zoom.us/t/issue-with-user-data-api-call-client-credentials-not-supported/137773 "2025-10-01T12:26:01Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Andres\_J](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/andres_j/32/71529_2.png) [@Andres\_J](https://devforum.zoom.us/u/Andres_J)\ **Post date:** [October 1, 2025, 12:26pm UTC](https://devforum.zoom.us/t/issue-with-user-data-api-call-client-credentials-not-supported/137773/1 "2025-10-01T12:26:01Z")
### Hello, Our client has requested that we integrate their chatbot with Zoom. To achieve this, we initially created a **General App** in the Zoom Marketplace for testing purposes. This application has the following configuration: - **Type:** General App - **Basic Information:** - **Access:** - **Surface:** - **Scopes:** Once this setup was completed, we added the app for local testing. In parallel, we created a small **Node.js application** to test the integration. This app uses the CLIENT\_ID, CLIENT\_SECRET, and WEBHOOK\_SECRET\_TOKEN from our Zoom app, and calls the endpoint: ```auto https://zoom.us/oauth/token ``` with **Basic Authentication** and `grant_type=client_credentials`. In the response payload, along with the access token, we receive the following scopes: ```auto marketplace:delete:event_subscription marketplace:read:list_event_subscriptions marketplace:update:client_secret marketplace:update:event_subscription marketplace:write:event_subscription marketplace:write:websocket_connection imchat:userapp ``` At first glance, everything seems to work: - The user installs the application. - The user can chat with our chatbot through the integration. - Our application receives the `bot_notification` event via webhook and responds correctly. **The problem:** We need to retrieve additional user information. We are trying to call: ```auto GET https://api.zoom.us/v2/users/{userId} ``` using the token generated earlier. However, the API returns the following error: ```auto { "code": 124, "message": "This API does not support client credentials for authorization." } ``` Although our app has the scope `user:read:user`, this scope does not appear in the token response. **My questions:** - Why are we unable to access user data with the current setup? - Is this a permissions issue with the app owner? - Do we need to create a different type of application to perform these user data queries? If so, which type of app should we create, and what is the correct approach? - Or am I missing something in the way I am performing the request? **In summary:** Could someone clarify what I am missing or doing wrong? Thank you in advance. ---
**Author:** ![MultiplayerSession](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/multiplayersession/32/66446_2.png) [@MultiplayerSession](https://devforum.zoom.us/u/MultiplayerSession)\ **Post date:** [October 1, 2025, 4:11pm UTC](https://devforum.zoom.us/t/issue-with-user-data-api-call-client-credentials-not-supported/137773/2 "2025-10-01T16:11:45Z")
Since this is a user-managed application, are you passing [the `me` keyword](https://developers.zoom.us/docs/api/using-zoom-apis/#the-me-keyword) as the user ID in the [Get a user](https://developers.zoom.us/docs/api/users/#tag/users/get/users/%7BuserId%7D) request URL? This seems like an [error condition](https://developers.zoom.us/docs/api/using-zoom-apis/#requests-for-oauth-apps) when you don’t do so. Otherwise, you’ll need the admin-level scopes and be an admin-managed application. ---
**Author:** ![amanda-recallai](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/amanda-recallai/32/44747_2.png) [@amanda-recallai](https://devforum.zoom.us/u/amanda-recallai)\ **Post date:** [October 1, 2025, 11:20pm UTC](https://devforum.zoom.us/t/issue-with-user-data-api-call-client-credentials-not-supported/137773/3 "2025-10-01T23:20:47Z")
Hi @Andres_J, the Users APIs require a **[user-authorized OAuth access token](https://developers.zoom.us/docs/api/using-zoom-apis/#requests-for-oauth-apps)**, so a token from `grant_type=client_credentials` will be rejected for user data Your current token’s scopes (`marketplace:*`, `imchat:userapp`) indicate a client-credentials grant intended for marketplace/chat, not Users endpoints; request the **`user:read:user` or `user:read:admin` scopes** via user consent or account-level auth instead For a user-managed app, run the Authorization Code flow and call **`GET /users/me`** (the `me` keyword returns the installing user without needing their ID) If you must read other users on the account, make the app admin-managed or use **[Server-to-Server OAuth](https://developers.zoom.us/docs/internal-apps/s2s-oauth/)**, and include admin scopes like `user:read:admin` as listed in the Users API reference ---
**Author:** ![Andres\_J](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/andres_j/32/71529_2.png) [@Andres\_J](https://devforum.zoom.us/u/Andres_J)\ **Post date:** [October 2, 2025, 7:18am UTC](https://devforum.zoom.us/t/issue-with-user-data-api-call-client-credentials-not-supported/137773/4 "2025-10-02T07:18:10Z")
Hi, I have tried with “me” and also using the userid, getting the same error. Regards. ---
**Author:** ![Andres\_J](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/andres_j/32/71529_2.png) [@Andres\_J](https://devforum.zoom.us/u/Andres_J)\ **Post date:** [October 2, 2025, 10:07am UTC](https://devforum.zoom.us/t/issue-with-user-data-api-call-client-credentials-not-supported/137773/5 "2025-10-02T10:07:28Z")
Hi, I have tried to create an S2S with Account-level app but I do not have the scope “user:read:admin” nor the “user:read:user:admin” and “user:read:user”. Regards. ---
**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\ **Post date:** [October 2, 2025, 3:24pm UTC](https://devforum.zoom.us/t/issue-with-user-data-api-call-client-credentials-not-supported/137773/6 "2025-10-02T15:24:03Z")
Hi @Andres_J > [@Andres\_J](#): > > I have tried to create an S2S with Account-level app but I do not have the scope “user:read:admin” nor the “user:read:user:admin” and “user:read:user”. When you do not see the scopes available, it’s most likely because the account owner did not give permission for that category for your specific role. See the documentation here: [Using role management](https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0064983#:~:text=an%20existing%20role%3A-,Sign%20in%20to%20the%20Zoom%20web%20portal%20as%20the%20account,to%20the%20right%20of%20it). They would need to give read rights for users under the user management settings in the portal. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\ **Post date:** [October 6, 2026, 7:01am UTC](https://devforum.zoom.us/t/issue-with-user-data-api-call-client-credentials-not-supported/137773/8 "2026-10-06T07:01:08Z")
This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.