# Unable to Validate webhook endpoint URL

**URL:** <https://devforum.zoom.us/t/unable-to-validate-webhook-endpoint-url/143030>\
**Category:** API and Webhooks\
**Tags:** webhooks\
**Created:** [April 17, 2026, 2:03pm UTC](https://devforum.zoom.us/t/unable-to-validate-webhook-endpoint-url/143030 "2026-04-17T14:03:48Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Filadelfia](https://avatars.discourse-cdn.com/v4/letter/f/22d042/32.png) [@Filadelfia](https://devforum.zoom.us/u/Filadelfia)\
**Post date:** [April 17, 2026, 2:03pm UTC](https://devforum.zoom.us/t/unable-to-validate-webhook-endpoint-url/143030/1 "2026-04-17T14:03:48Z")

</div>

Trying to setup an endpoint for a webhook, and the url we setup has failed to validate, with message _ **URL validation failed. Try again later** _. The endpoint works just fine on Postman. We’ve setup localy a ngrok link and it validated just fine.

We looked into the server configurations and did not find anything that could be causing this issue, so coming here to ask how to better troubleshoot and find a solution to this issue.

---

<div class="post-metadata">

**Author:** ![chunsiong.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/chunsiong.zoom/32/35488_2.png) [@chunsiong.zoom](https://devforum.zoom.us/u/chunsiong.zoom)\
**Post date:** [April 22, 2026, 7:18am UTC](https://devforum.zoom.us/t/unable-to-validate-webhook-endpoint-url/143030/2 "2026-04-22T07:18:05Z")

</div>

@Filadelfia what language are you using on the webhook server side? It might sometimes be an .env issue where the secret is not loaded correctly.

---

<div class="post-metadata">

**Author:** ![Filadelfia](https://avatars.discourse-cdn.com/v4/letter/f/22d042/32.png) [@Filadelfia](https://devforum.zoom.us/u/Filadelfia)\
**Post date:** [April 27, 2026, 1:16pm UTC](https://devforum.zoom.us/t/unable-to-validate-webhook-endpoint-url/143030/3 "2026-04-27T13:16:11Z")

</div>

We use javascript, it can not be an issue with the .env, we have other zoom api calls working just fine, we are only having issues validating the webhook endpoint.

---

<div class="post-metadata">

**Author:** ![chunsiong.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/chunsiong.zoom/32/35488_2.png) [@chunsiong.zoom](https://devforum.zoom.us/u/chunsiong.zoom)\
**Post date:** [April 28, 2026, 5:55am UTC](https://devforum.zoom.us/t/unable-to-validate-webhook-endpoint-url/143030/4 "2026-04-28T05:55:31Z")

</div>

@Filadelfia I run this on my server side.

// Define a function to handle webhook requests  
function handleWebhookRequest(req, res, secretToken, path) {

if (req.method === ‘POST’) {  
// Check if the event type is “endpoint.url\_validation”  
if (req.body.event === ‘endpoint.url\_validation’) {  
const hashForValidate = crypto.createHmac(‘sha256’, secretToken)  
.update(req.body.payload.plainToken)  
.digest(‘hex’);

```
res.status(200).json({
  "plainToken": req.body.payload.plainToken,
  "encryptedToken": hashForValidate
});

```

} else {

```
res.status(200).send();

```

}  
}else if (req.method === ‘GET’) {

} else {  
// Handle unsupported HTTP methods  
res.status(405).send(“Method Not Allowed”);  
}

}