# Server-to-Server OAuth with Master API leads to Invalid access token

**URL:** <https://devforum.zoom.us/t/server-to-server-oauth-with-master-api-leads-to-invalid-access-token/100331>\
**Category:** Authentication\
**Created:** [December 18, 2023, 9:42am UTC](https://devforum.zoom.us/t/server-to-server-oauth-with-master-api-leads-to-invalid-access-token/100331 "2023-12-18T09:42:43Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![robert.schmidt04](https://avatars.discourse-cdn.com/v4/letter/r/8797f3/32.png) [@robert.schmidt04](https://devforum.zoom.us/u/robert.schmidt04)\
**Post date:** [December 18, 2023, 9:42am UTC](https://devforum.zoom.us/t/server-to-server-oauth-with-master-api-leads-to-invalid-access-token/100331/1 "2023-12-18T09:42:43Z")

</div>

**API Endpoint(s)**

- GET /accounts/me/plans/usage

**Description**  
When trying to request GET /accounts/me/plans/usage I receive code 124

**Error?**

```json
{
    "code": 4700,
    "message": "Invalid access token, does not contain scopes: [billing_plan:read:admin]."
}

```

**How To Reproduce**

1. Request URL / Headers
  - GET [http://zoom.us/api/v2/accounts/me/plans/usage](http://zoom.us/api/v2/accounts/me/plans/usage)

2. Authentication method or app type
  - Server-to-Server OAuth
  - We are on a Master Account Plan

3. Any errors
  - See above

---

<div class="post-metadata">

**Author:** ![freelancer.nak](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/freelancer.nak/32/40968_2.png) [@freelancer.nak](https://devforum.zoom.us/u/freelancer.nak)\
**Post date:** [December 18, 2023, 10:50am UTC](https://devforum.zoom.us/t/server-to-server-oauth-with-master-api-leads-to-invalid-access-token/100331/2 "2023-12-18T10:50:30Z")

</div>

@robert.schmidt04 Hope you will be fine.

Please add required/missing scopes to the app & then reauthorize.

---

<div class="post-metadata">

**Author:** ![robert.schmidt04](https://avatars.discourse-cdn.com/v4/letter/r/8797f3/32.png) [@robert.schmidt04](https://devforum.zoom.us/u/robert.schmidt04)\
**Post date:** [December 18, 2023, 11:24am UTC](https://devforum.zoom.us/t/server-to-server-oauth-with-master-api-leads-to-invalid-access-token/100331/3 "2023-12-18T11:24:33Z")

</div>

`billing_plan` is not scope you can add in a Server-to-Server OAuth App

Paging @elisa.zoom

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [December 18, 2023, 5:25pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-with-master-api-leads-to-invalid-access-token/100331/4 "2023-12-18T17:25:13Z")

</div>

Hi @robert.schmidt04  
You should be able to add the billing:master account if you have a master account license in your account.

> **[Master Account API](https://developers.zoom.us/docs/api/rest/master-account-apis/)**
>
> The Zoom Developer Platform is an open platform that allows third-party developers to build applications and integrations upon Zoom’s video-first unified communications platform.

---

<div class="post-metadata">

**Author:** ![robert.schmidt04](https://avatars.discourse-cdn.com/v4/letter/r/8797f3/32.png) [@robert.schmidt04](https://devforum.zoom.us/u/robert.schmidt04)\
**Post date:** [December 18, 2023, 7:09pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-with-master-api-leads-to-invalid-access-token/100331/5 "2023-12-18T19:09:06Z")

</div>

Thanks @elisa.zoom  
That’s exactly what I used. For sub-accounts this working, but for `/accounts/me/plans/usage` the mentioned error is thrown.

---

<div class="post-metadata">

**Author:** ![sam7](https://avatars.discourse-cdn.com/v4/letter/s/bc8723/32.png) [@sam7](https://devforum.zoom.us/u/sam7)\
**Post date:** [December 18, 2023, 7:27pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-with-master-api-leads-to-invalid-access-token/100331/6 "2023-12-18T19:27:48Z")

</div>

YES. Update the zoom API integration. I am in the ISV partner program

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [December 19, 2023, 3:22pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-with-master-api-leads-to-invalid-access-token/100331/7 "2023-12-19T15:22:10Z")

</div>

Hi @robert.schmidt04  
So if you pass the master account ID do you get the same error?

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [December 19, 2023, 3:22pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-with-master-api-leads-to-invalid-access-token/100331/8 "2023-12-19T15:22:33Z")

</div>

Hi @sam7  
Please open up a new thread with your issue, this is not related to what you are talking about

---

<div class="post-metadata">

**Author:** ![robert.schmidt04](https://avatars.discourse-cdn.com/v4/letter/r/8797f3/32.png) [@robert.schmidt04](https://devforum.zoom.us/u/robert.schmidt04)\
**Post date:** [December 19, 2023, 6:39pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-with-master-api-leads-to-invalid-access-token/100331/9 "2023-12-19T18:39:07Z")

</div>

I haven’t tried, I didn’t figure that would make sense. I’ll try now.

---

<div class="post-metadata">

**Author:** ![robert.schmidt04](https://avatars.discourse-cdn.com/v4/letter/r/8797f3/32.png) [@robert.schmidt04](https://devforum.zoom.us/u/robert.schmidt04)\
**Post date:** [December 19, 2023, 6:43pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-with-master-api-leads-to-invalid-access-token/100331/10 "2023-12-19T18:43:46Z")

</div>

Just tried this: /accounts/:accountId/plans/usage with accountId being my master account’s accountId.

Result:

```json
{"code":2001,"message":"Account does not exist: xxxxxxxxxxxxxxxxxxxxxxx."}

```

(xxxxxxxxxxxxxxxxxxxxxxx being my master account’s accountId)

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [December 19, 2023, 7:16pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-with-master-api-leads-to-invalid-access-token/100331/11 "2023-12-19T19:16:27Z")

</div>

Thanks @robert.schmidt04  
I will go ahead and send you a private message to follow up on this issue
