# Zoom Room API: JWT Only?

**URL:** <https://devforum.zoom.us/t/zoom-room-api-jwt-only/2877>\
**Category:** API and Webhooks\
**Created:** [January 4, 2019, 2:21pm UTC](https://devforum.zoom.us/t/zoom-room-api-jwt-only/2877 "2019-01-04T14:21:02Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![zaid](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/zaid/32/68_2.png) [@zaid](https://devforum.zoom.us/u/zaid)\
**Post date:** [January 4, 2019, 2:21pm UTC](https://devforum.zoom.us/t/zoom-room-api-jwt-only/2877/1 "2019-01-04T14:21:02Z")

</div>

Testing out Zoom Room APIs here.

I created an account-level application in [developer.zoom.us](http://developer.zoom.us).  
It seems there are no scopes for Rooms.  
Using dashboard:read:admin scope for my application, I authenticated using OAuth2.0 then I was able to read zoom room and list all (from metrics endpoints), but I cannot call any of the endpoints here: [https://marketplace.zoom.us/docs/guides/zoom-rooms/zoom-rooms-api](https://marketplace.zoom.us/docs/guides/zoom-rooms/zoom-rooms-api).

I get back:

```
{
    "code": 124,
    "message": "Scope cannot be null"
}

```

Do I need to use JWT authentication or am I missing a scope?

---

<div class="post-metadata">

**Author:** ![Jonathan\_Champ](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jonathan_champ/32/45_2.png) [@Jonathan\_Champ](https://devforum.zoom.us/u/Jonathan_Champ)\
**Post date:** [January 4, 2019, 6:52pm UTC](https://devforum.zoom.us/t/zoom-room-api-jwt-only/2877/2 "2019-01-04T18:52:23Z")

</div>

That page makes it seem like it only allows JWT authentication and I don’t see any appropriate scopes on these lists: [https://marketplace.zoom.us/docs/guides/zoom-app-marketplace/permissions](https://marketplace.zoom.us/docs/guides/zoom-app-marketplace/permissions)

dashboard:read:admin should definitely not work because it’s the wrong data. If it existed, something like room:read or room:read:admin would make sense.

---

<div class="post-metadata">

**Author:** ![zaid](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/zaid/32/68_2.png) [@zaid](https://devforum.zoom.us/u/zaid)\
**Post date:** [January 7, 2019, 11:20am UTC](https://devforum.zoom.us/t/zoom-room-api-jwt-only/2877/3 "2019-01-07T11:20:49Z")

</div>

So in other terms, it has to be **User-Managed Application** authentication?

---

<div class="post-metadata">

**Author:** ![Jonathan\_Champ](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jonathan_champ/32/45_2.png) [@Jonathan\_Champ](https://devforum.zoom.us/u/Jonathan_Champ)\
**Post date:** [January 7, 2019, 2:16pm UTC](https://devforum.zoom.us/t/zoom-room-api-jwt-only/2877/4 "2019-01-07T14:16:33Z")

</div>

> [@zaid](#):
>
> **User-Managed Application**

If by this you mean how it is described on [https://marketplace.zoom.us/docs/guides/authorization/oauth-with-zoom](https://marketplace.zoom.us/docs/guides/authorization/oauth-with-zoom) and if the Rooms API doesn’t work with OAuth because there’s no scope, then I don’t think so. Both User-Managed Application and Account Level Application seem to be related to “Building an App” with OAuth and I don’t see how to “Build an App” for the Marketplace with JWT. Sorry, hopefully someone else knows more about Marketplace - I’m just using JWT directly with accounts that I own.