What scopes are needed for an server-to-sever oauth app to be able to send SMS messages?

Zoom Apps
,
1

I am trying to create a server to server oauth app that is able to send SMS messages.

The goal of this app would be to use the API to send an SMS message to an internal team when certain events happen (that will be triggered by an automation elsewhere).

The problem I am having, is finding what scopes are supposed to allow this to happen.

The server-to-server Oauth doesn’t seem to have all the scopes available like:"
phone:write:admin
phone:read:admin

I am using the OWNER account to create this app, so I should have all scopes available to me.

I was able to find:
contact_center:write:sms:admin

but I am unsure if that is what I am going to need to make this work.

For the record, we can run this off a dummy service account with a license, or just via the app scopes, I just don’t know what scopes will allow me to do what I am looking for.

Thanks!

2

hi @Dustin1280 ,

The ansere is “you can not send SMS with server to server”
I know you are considering thisw an admin thing and , I did likewise, but Zoom sees each sms as a user facility. At present the SMS must be done at a user level.

There have been hints this could change, but as I understand it today, that is not possible.

I am not a zoom employee, so others may know more, but that is my adive to you.

All the best

John Drinkwater
Zoom Developer Champion
Not a Zoom Employee

3

So if we cannot do server to server SMS, could we make a general zoom app and install that on a service user with SMS message? I have looked at general app scopes as well and still couldn’t find anything that allows automated SMS…

4

you could generate an sms app for a user to send sms. Yes.

john

5

Thanks for clarifying this. I was wondering the same thing because the available scopes are pretty confusing here. If SMS is strictly tied to a user context, then using a dedicated licensed service account with a user-level OAuth app sounds like the most practical workaround for automation. It would still be helpful if Zoom could confirm which scopes are actually required for sending SMS in that setup since they are not very obvious in the marketplace.

6

Yes… I have looked through the scopes several times and even in a user level app I still don’t know which scope I am supposed to enable for SMS send…

7

Yeah, that’s exactly the confusing part. I checked the docs as well and couldn’t find a clearly documented SMS send scope for standard Phone APIs. My guess is Zoom may require a user-level OAuth app tied to a licensed Zoom Phone user, but the actual scope combination for SMS still feels unclear. Have you tried checking if the SMS endpoint itself returns a permission error mentioning the missing scope? Sometimes Zoom APIs reveal the exact required permission in the response.

8

Yeah I have not been able to find it. Hopefully someone who has built something like this or zoom themselves will jump in here with some guidance on what scopes are actually required.