# Rest api with OAuth failed with 400 error

**URL:** <https://devforum.zoom.us/t/rest-api-with-oauth-failed-with-400-error/10734>\
**Category:** API and Webhooks\
**Created:** [April 3, 2020, 12:10am UTC](https://devforum.zoom.us/t/rest-api-with-oauth-failed-with-400-error/10734 "2020-04-03T00:10:49Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![alan.chen](https://avatars.discourse-cdn.com/v4/letter/a/e9bcb4/32.png) [@alan.chen](https://devforum.zoom.us/u/alan.chen)\
**Post date:** [April 3, 2020, 12:10am UTC](https://devforum.zoom.us/t/rest-api-with-oauth-failed-with-400-error/10734/1 "2020-04-03T00:10:49Z")

</div>

**Description**  
I create an Oauth user-manage app, with secret Id/Secret and scopes add.  
Following the steps at [https://marketplace.zoom.us/docs/guides/auth/oauth](https://marketplace.zoom.us/docs/guides/auth/oauth)  
I get token successfully after step 2  
But when using the token with Get method as

[https://api.zoom.us/v2/users/me](https://api.zoom.us/v2/users/me)

are all failed.

**Error**

Http Response Status Code: 400  
{“code”:200,“message”:“Invalid api key or secret.”}

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
OAuth  
.

**Which Endpoint/s?**  
/v2/accounts/me/meetings?page\_number=1&page\_size=30&from=2020-01-01

**How To Reproduce (If applicable)**  
Steps to reproduce the behavior:

1. Request URL / Headers (without credentials) / Body
2. See error

**Screenshots (If applicable)**

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/6/6a9991348ecebf9da708d8d503aab7fdfd5e3a1e.png)

**Additional context**  
Add any other context about the problem here.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [April 3, 2020, 5:56am UTC](https://devforum.zoom.us/t/rest-api-with-oauth-failed-with-400-error/10734/2 "2020-04-03T05:56:01Z")

</div>

Hey @alan.chen,

Looks like your access\_token is correct, however, to call the accounts endpoints you need to be a Zoom partner.

From the [docs](https://marketplace.zoom.us/docs/api-reference/zoom-api/accounts/accounts):

“Only Master Accounts can create and have Sub Accounts. Zoom only assigns this privilege to trusted partners and only approved partners can use this API. Contact [isv@zoom.us](mailto:isv@zoom.us) if you are interested.”

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![alan.chen](https://avatars.discourse-cdn.com/v4/letter/a/e9bcb4/32.png) [@alan.chen](https://devforum.zoom.us/u/alan.chen)\
**Post date:** [April 3, 2020, 9:21pm UTC](https://devforum.zoom.us/t/rest-api-with-oauth-failed-with-400-error/10734/3 "2020-04-03T21:21:24Z")

</div>

Thanks for your reply. For Master Account, do you means the admin/owner account? Meanwhile if our admin/master account create a JWT app and generate API key/secret and notification Token, it that not enough to call api get meeting/participates info or register Webhook? What’s the trusted partner refer to here? any steps we need follow to be a trusted partner?

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [April 3, 2020, 10:42pm UTC](https://devforum.zoom.us/t/rest-api-with-oauth-failed-with-400-error/10734/4 "2020-04-03T22:42:47Z")

</div>

Hey @alan.chen,

Only for the /accounts/\* endpoints do you need to contact [isv@zoom.us](mailto:isv@zoom.us) for trusted partner and master account plans.

You can call meeting and participants endpoints and webhooks (some for free) with the [Pro and above plan.](https://zoom.us/pricing)

Thanks,  
Tommy

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![alan.chen](https://avatars.discourse-cdn.com/v4/letter/a/e9bcb4/32.png) [@alan.chen](https://devforum.zoom.us/u/alan.chen)\
**Post date:** [April 4, 2020, 12:30am UTC](https://devforum.zoom.us/t/rest-api-with-oauth-failed-with-400-error/10734/5 "2020-04-04T00:30:09Z")

</div>

Thanks for clarify this. It sounds good enough without /accounts/\* endpoints for now.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [April 6, 2020, 4:10pm UTC](https://devforum.zoom.us/t/rest-api-with-oauth-failed-with-400-error/10734/6 "2020-04-06T16:10:44Z")

</div>

Happy to help!

Let us know if you have additional questions!

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 8:18pm UTC](https://devforum.zoom.us/t/rest-api-with-oauth-failed-with-400-error/10734/7 "2020-08-21T20:18:47Z")

</div>


