# Server-to-Server OAuth app - scope granted but API returns "does not contain scopes" error

**URL:** <https://devforum.zoom.us/t/server-to-server-oauth-app-scope-granted-but-api-returns-does-not-contain-scopes-error/145319>\
**Category:** API and Webhooks\
**Created:** [August 5, 2026, 10:11am UTC](https://devforum.zoom.us/t/server-to-server-oauth-app-scope-granted-but-api-returns-does-not-contain-scopes-error/145319 "2026-08-05T10:11:53Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![KMA](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/kma/32/75841_2.png) [@KMA](https://devforum.zoom.us/u/KMA)\
**Post date:** [August 5, 2026, 10:11am UTC](https://devforum.zoom.us/t/server-to-server-oauth-app-scope-granted-but-api-returns-does-not-contain-scopes-error/145319/1 "2026-08-05T10:11:53Z")

</div>

Account ID: (省略)  
App name: KMA-Make-Integration

The following endpoint returns a scope error even though the scope  
has been added, saved, and the app is Activated.

Endpoint: GET [https://api.zoom.us/v2/meetings/meeting\_summaries](https://api.zoom.us/v2/meetings/meeting_summaries)

Error response:  
{“code”:4711,“message”:“Invalid access token, does not contain  
scopes: [meeting:read:list\_summaries:admin].”}

- The scope meeting:read:list\_summaries:admin is checked and  
saved in the Scopes tab
- The app status is Activated
- Access tokens are freshly requested each time (not reused)
- The same error persists even after waiting 30+ minutes after  
adding the scope

Could you help identify the cause and resolution?

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [August 5, 2026, 1:01pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-app-scope-granted-but-api-returns-does-not-contain-scopes-error/145319/2 "2026-08-05T13:01:22Z")

</div>

Hi @KMA , can you please confirm that the person calling the endpoint has the correct role permissions?

> **[Using role management](https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0064983)**
>
> Each user in a Zoom account automatically has a system role, which can be owner, administrator, or member.

> **[Role permissions - Build Flow - Zoom Developer Docs](https://developers.zoom.us/docs/build-flow/role-permissions/)**
>
> Learn how to configure role-based permissions in Zoom to enable users to create and edit developer apps with Zoom for developers access.

If they do, please try removing the scope, regenerating the application credentials, re-adding the scope, creating a new access token and calling the endpoint.

---

<div class="post-metadata">

**Author:** ![Mario5](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mario5/32/77308_2.png) [@Mario5](https://devforum.zoom.us/u/Mario5)\
**Post date:** [October 22, 2026, 9:32pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-app-scope-granted-but-api-returns-does-not-contain-scopes-error/145319/4 "2026-10-22T21:32:19Z")

</div>

I’d check the role angle Gianni mentioned first. list\_summaries is an admin scope, so the app’s creator needs an owner or admin role, or a role that includes that access. Once the list call works, keep in mind it only returns metadata. You still need GET /v2/meetings/{uuid}/meeting\_summary for each item, and the page token expires after 15 minutes. If the real goal is just getting all the summaries out rather than the Make flow itself, I’m building a bulk exporter on these endpoints and can share it.