Zoom Webhook URL Verification Token Deprecation Enquiry

API and Webhooks Authentication
1

As per Zoom’s developer documentation, the Webhook URL verification token has been deprecated and replaced by the Secret Token for webhook verification, effective June 2025. However, our system is still receiving the verification token in the Zoom webhook request headers instead of the secret token in the `Authorization` header.

We need clarification on:

  1. Will Zoom completely stop sending the Verification Token in the webhook headers and switch to sending only the Secret Token in the `Authorization` header?

  2. If yes, what is the exact date this change will take effect?

  3. Should we immediately start using the Secret Token for webhook verification, or continue supporting the Verification Token until it is fully phased out?

  4. Or What method are we suppose to use to verify Webhook URL if verification token is deprecated or retired?.

2

Hi @Abdul_Qadeer
Thanks for reaching out to us and welcome to the Zoom Developer Forum.
We are in the process of retiring the verification token from the webhook headers and the Marketplace build flow.

I recommend migrating as soon as possible to avoid any issues with your integrations.

Here is a link to our Docs on how to validate your Webhook URL using the Secrect token