Manual domain validation for app hosted on a Cloudflare Workers subdomain (workers.dev)

I’m preparing to submit my Zoom App, Auto Meeting Ender, for review. The Publish page asks me to verify the domain workers.dev. That’s Cloudflare’s shared domain for Workers, so I can’t add a TXT record, meta tag or HTML file at its root. Each Cloudflare account controls only its own subdomain. Mine is:

auto-meeting-ender.zoom-auto-meeting-ender.workers.dev

To show I control it, I’ve placed the exact verification file Zoom generated at:
https://auto-meeting-ender.zoom-auto-meeting-ender.workers.dev/ZOOM_verify_814ced4051394df0be3a0fb4baf4745f.html

Every URL in the app uses this subdomain: Home URL, OAuth redirect, deauthorization endpoint, Privacy Policy, Terms of Use, Support and Documentation. I’m requesting manual domain validation, as described in the Domain Validation Explanation post. Happy to share more details by DM.

How To Reproduce

  1. App type: General App, user-managed, OAuth (authorization code + PKCE), with a Zoom Apps (in-meeting) surface.
  2. Open Production → Publish → Verify domains → workers.dev → Verify.
  3. Every method (TXT record, HTML file, meta tag) requires access to the root of workers.dev, e.g. https://workers.dev/ZOOM_verify_``….html, which only Cloudflare controls.
  4. Error: the domain can’t be verified, so the Submit button stays disabled.

Hello,

Thank you for reaching out in relation to Our Domain Validation process, the next steps will be sent to you via DM. Please refer to our domain validation resource: Domain Validation Explanation for any further questions you may have about the process.

Thank you.