# Marketplace Api Unauthorized issue

**URL:** <https://devforum.zoom.us/t/marketplace-api-unauthorized-issue/133265>\
**Category:** API and Webhooks\
**Tags:** api\
**Created:** [May 28, 2025, 1:15am UTC](https://devforum.zoom.us/t/marketplace-api-unauthorized-issue/133265 "2025-05-28T01:15:41Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![pryaoh](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/pryaoh/32/68161_2.png) [@pryaoh](https://devforum.zoom.us/u/pryaoh)\
**Post date:** [May 28, 2025, 1:15am UTC](https://devforum.zoom.us/t/marketplace-api-unauthorized-issue/133265/1 "2025-05-28T01:15:41Z")

</div>

Hi,

I am currently testing the API for creating a marketplace app and have encountered an issue.  
[createApps](https://developers.zoom.us/docs/api/rest/reference/marketplace/methods/#operation/CreateApps)

I registered a Marketplace OAuth App and received an accessToken through the AuthorizationCode flow. The scope includes **marketplace:write:app:admin** as shown below:

```json
{
  "access_token": "<value>",
  "token_type": "bearer",
  "refresh_token": "<value>",
  "expires_in": 3599,
  "scope": "marketplace:read:app:admin marketplace:read:list_apps:admin marketplace:write:app:admin",
  "api_url": "https://api.zoom.us",
  "expiry_datetime": "<datetime>"
}

```

However, I am getting an “Unauthorized” error in the following situation. I do set many scopes like the following when creating an app. (Could this part be the problem?)

```json
{
    "app_type": "s2s_oauth",
    "app_name": "xxx Service Application",
    "scopes": [
        "account:read:managed_domains:admin",
        "account:read:trusted_domains:admin",

        "billing:read:plan_information:admin", 
        "billing:read:plan_usage:admin",

        "group:read:list_groups:admin",
        "group:read:administrator:admin",
        "group:read:member:admin",
        "group:read:list_members:admin",

        "phone:read:list_numbers:admin",
        "phone:read:call_log:admin",
        "phone:read:call:admin",
        "phone:read:list_call_logs:admin",
        "phone:read:call_qos:admin",
        "phone:read:number:admin",
        
        "user:read:settings:admin",
        "user:read:user:admin",
        "user:read:email:admin",
        "user:read:list_users:admin"
    ],
    "contact_name": "xxxxx",
    "contact_email": "xxxx@xxxxxx.xxxx",
    "company_name": "xxxx"
}

```

Error Message

```plaintext
Invoke-WebRequest: { "status": "UNAUTHORIZED", "message": "Access Denied", "errorCode": 10, "timestamp":
"<datetime>" }

```

What should I do?

---

<div class="post-metadata">

**Author:** ![pryaoh](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/pryaoh/32/68161_2.png) [@pryaoh](https://devforum.zoom.us/u/pryaoh)\
**Post date:** [May 29, 2025, 1:24am UTC](https://devforum.zoom.us/t/marketplace-api-unauthorized-issue/133265/2 "2025-05-29T01:24:20Z")

</div>

Regarding the API Documents:

- `/v2/marketplace/apps` needs to pass the `manifest` parameter to create a General app.
- `/v2/marketplace/apps/accounts/{accountId}` needs to pass other parameters to create Server OAuth or Meeting SDK apps.

When I tested this, the return value was **200** , not **201** as stated in the documentation. I also confirmed that the app was not actually created in the marketplace. It seems this needs to be checked.

---

<div class="post-metadata">

**Author:** ![developer-whova](https://avatars.discourse-cdn.com/v4/letter/d/43a26b/32.png) [@developer-whova](https://devforum.zoom.us/u/developer-whova)\
**Post date:** [January 26, 2026, 11:57pm UTC](https://devforum.zoom.us/t/marketplace-api-unauthorized-issue/133265/3 "2026-01-26T23:57:32Z")

</div>

Have anyone solved this issue? I am seeing the same issue @chunsiong.zoom @elisa.zoom

What is the accountid for /v2/marketplace/apps/accounts/{accountId} ? on my side, I only get an empty return {} valude from the API