Webhooks and OAuth

In this case, where you are a “lone wolf developer”, you are the business owner, and are permitted to sign, but you must provide all the accurate information so we can reach out to you if there are issues, and you are required to adhere to ALL requirements (just like any other entity), such as: Supporting customers, marketing policies, security, etc…

We expect “lone wolf developers” to have their own verifiable domain, so we can confirm we know you aren’t a “bad actor” with malicious intents for Zoom customers.

For example, I have my own domain, and have configured Google Apps (my email provider) to use my email address <my_user>@<my_domain>.

We expect lone wolf developers to operate and conduct themselves like an ethical business if they want their apps published to Zoom App Marketplace (for mass distribution). If however, you are building an app for a specific customer as a contractor, then you can do one of the following to ensure, the customer is in control of how your app accesses their account.:

  1. Build the app using your Zoom account, and provide the code to the customer.

  2. Request a Publishable URL (for your app in Zoom Marketplace) which will, once approved by Zoom, allow the customer to install your app with the Publishable URL. Only do this if you plan on publishing to Marketplace in the long-run (and conducting yourself and maintaining your app as a business entity would, so you can sign the Marketplace Developer Agreement).

  3. Ask the customer to build an OAuth App, using the parameters you define (scopes, features, etc…), but they DISABLE the “Intend to publish to Marketplace” feature, and then they provide you this newly created app’s API Keys. Then the customer is in control of how your app accesses their account.

These three scenarios above would allow you to build an app, but the customer is in charge of their account and how your app accesses their Zoom account/data.

Does this make sense?

Perhaps, in the future, we may launch a Zoom Certified Developer Program, but until such time…these are the options available.