# Server2Server OAuth returning {'code': 200, 'message': 'Account does not enabled REST API.'}

**URL:** <https://devforum.zoom.us/t/server2server-oauth-returning-code-200-message-account-does-not-enabled-rest-api/95519>\
**Category:** Authentication\
**Tags:** api, s2s-oauth\
**Created:** [September 21, 2023, 9:57am UTC](https://devforum.zoom.us/t/server2server-oauth-returning-code-200-message-account-does-not-enabled-rest-api/95519 "2023-09-21T09:57:56Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [September 21, 2023, 8:27pm UTC](https://devforum.zoom.us/t/server2server-oauth-returning-code-200-message-account-does-not-enabled-rest-api/95519/3 "2023-09-21T20:27:52Z")

</div>

Hi @shlomi.fenster @ecodes please see the following:

> [@Issue with Zoom API - Migration from JWT to Server-to-Server OAuth - PHP cUrl -code":200,"message":"Account does not enabled REST API."](https://devforum.zoom.us/t/issue-with-zoom-api-migration-from-jwt-to-server-to-server-oauth-php-curl-code-200-message-account-does-not-enabled-rest-api/95052/7):
>
> A request for account\_credentials requires an account\_id in the URL, and a ClientID/ClientSecret in the request itself: " To use account credentials to get an access token for your app, call the Zoom OAuth token API with the account\_credentials grant\_type , your account\_id , and your client ID and client secret, [base64 encoded](https://www.base64encode.org/) (encode your client ID and client secret with a colon between them, e.g. client\_id:client\_secret )." By the way, it’s far easier to create/compose these requests using…

---

_[View the full topic](https://devforum.zoom.us/t/server2server-oauth-returning-code-200-message-account-does-not-enabled-rest-api/95519)._
