# Server-to-Server OAuth App Token Missing Configured Scopes (Error 4711)

**URL:** <https://devforum.zoom.us/t/server-to-server-oauth-app-token-missing-configured-scopes-error-4711/132443>\
**Category:** Cloud Recordings\
**Created:** [May 7, 2025, 12:51pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-app-token-missing-configured-scopes-error-4711/132443 "2025-05-07T12:51:24Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Learn](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/learn/32/57496_2.png) [@Learn](https://devforum.zoom.us/u/Learn)\
**Post date:** [May 7, 2025, 12:51pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-app-token-missing-configured-scopes-error-4711/132443/1 "2025-05-07T12:51:24Z")

</div>

Dear Zoom Support Team,

I am experiencing an issue with a Server-to-Server OAuth application (Client ID: 2kMjkysNTyG2Em9bfuPA0w) where the access tokens being generated do not include the scopes I have configured in the Zoom App Marketplace.

My goal is to use the API endpoint to download meeting transcripts on Gdrive for the mentioned date range. To achieve this, I have enabled the Recording level, user level and accout level scopes for my Server-to-Server OAuth app in the Marketplace(refer the attached snap-shot of scope section of the app configuration

Despite these scopes being enabled a API calls to the /accounts/{accountId}/recordings endpoint consistently fail with a 400 Bad Request, error code 4711, and the message: “Invalid access token, does not contain scopes:[cloud\_recording:read:list\_account\_recordings:master].”

I have debugged the process and successfully obtained an access token. However, upon decoding this token, it is clear that the ‘scp’ (scopes) claim is entirely missing from the token payload, meaning no permissions are being granted.

Here is an example of a recently obtained access token:  
eyJzdiI6IjAwMDAwMiIsImFsZyI6IkhTNTEyIiwidiI6IjIuMCIsImtpZCI6IjE1N2I2MWQyLWI2OWItNGI3ZC1hMWI4LWM4ZDg0ZGVhNGU1MyJ9.eyJhdWQiOiJodHRwczovL29hdXRoLnpvb20udXMiLCJ1aWQiOiJ5Zy1FWHpDalQzQ3E5ejdzYmRobW9BIiwidmVyIjoxMCwiYXVpZCI6ImQ1YTViNTc0MTQ0OWMwZGYxYmM2MjRkOWQxMGNjYTQzYTI0ODQ5NzE1ZGJhMDZhMTQ0YzRlYzdkYWJhMzRmOTIiLCJuYmYiOjE3NDY1MjE0ODcsImNvZGUiOiJuQmZFZ2NLclJFZVdQVmhnMEg0Y0tRcDVsOE5NcjVqdGMiLCJpc3MiOiJ6bTpjaWQ6MmtNamt5c05UeUcyRW05YmZ1UEEwdyIsImdubyI6MCwiZXhwIjoxNzQ2NTI1MDg3LCJ0eXBlIjozLCJpYXQiOjE3NDY1MjE0ODcsImFpZCI6IjdFRzNFZVFaU3UyVlZCMkFsTHhteHcifQ.qr-jHTFpb-pLMom6SwRwNBW8TATFQ0C9gfOotfaGhN3CCCpm-6agy7Qbv4JmPzi0C9snXZKv\_4dBtv9C0QvUrA

And here is its decoded payload:  
{  
“aud”: “[https://oauth.zoom.us](https://oauth.zoom.us)”,  
“uid”: “yg-EXzCjT3Cq9z7sbdhmoA”,  
“ver”: 10,  
“auid”: “d5a5b5741449c0df1bc624d9d10cca43a24849715dba06a144c4ec7daba34f92”,  
“nbf”: 1746521487,  
“code”: “nBfEgcKrREeVpVhg0H4cKQp5l8NMr5jtc”,  
“iss”: “zm:cid:2kMjkysNTyG2Em9bfuPA0w”,  
“gno”: 0,  
“exp”: 1746525087,  
“type”: 3,  
“iat”: 1746521487,  
“aid”: “7EG3EeQZSu2VVB2AlLxmxw”  
}

As you can see, there is no ‘scp’ claim.

Troubleshooting steps already taken without success:

- Verified the correct Client ID is being used.
- Ensured the app is activated.
- Added ‘cloud\_recording:read:list\_account\_recordings:master’ scopes.
- Regenerated the Client Secret multiple times.
- Waited significant periods for propagation and restarted application sessions.

Could you please investigate why the configured scopes for my Server-to-Server OAuth app (Client ID: 2kMjkysNTyG2Em9bfuPA0w) are not being included in the generated access tokens?

My Account ID is: 7EG3EeQZSu2VVB2AlLxmxw

---

<div class="post-metadata">

**Author:** ![Learn](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/learn/32/57496_2.png) [@Learn](https://devforum.zoom.us/u/Learn)\
**Post date:** [May 7, 2025, 2:41pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-app-token-missing-configured-scopes-error-4711/132443/2 "2025-05-07T14:41:52Z")

</div>

I have full access, I am the super admin, the error does not change

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/b/7/b76f165c7174360c855b6371ac34ade7d7bcb75d.png)  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/e/9/e9d492cb6d32676079e76a61a2a62112f20f7fd4.png)  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/0/b/0b7dd87354d03970c760e2ce520cc929dc43d027.png)

---

<div class="post-metadata">

**Author:** ![Learn](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/learn/32/57496_2.png) [@Learn](https://devforum.zoom.us/u/Learn)\
**Post date:** [May 7, 2025, 2:44pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-app-token-missing-configured-scopes-error-4711/132443/3 "2025-05-07T14:44:06Z")

</div>

![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/7/7/77a8764a1d78e16f140e0b7f2d7eaf37d08ad650.png)  
The error

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [May 8, 2025, 3:05pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-app-token-missing-configured-scopes-error-4711/132443/4 "2025-05-08T15:05:38Z")

</div>

Hey @learn  
Thanks for reaching out to us, and sorry for the late reply here  
The issue here is that you are trying to access [Master account](https://developers.zoom.us/docs/api/ma/) endpoints, and these are only available for accounts that have enrolled in this plan.

Your set up look fine, so can you please try using the following endpoint?

> **[Meetings APIs](https://developers.zoom.us/docs/api/meetings/#tag/cloud-recording/GET/users/%7BuserId%7D/recordings)**
>
> API reference for: Meetings

> **[Meetings APIs](https://developers.zoom.us/docs/api/meetings/#tag/cloud-recording/GET/meetings/%7BmeetingId%7D/recordings)**
>
> API reference for: Meetings