Get app's user requests returns 403

Marcel
Wed, 19 Mar 2025 08:02:27 +0000
API and Webhooks

Description
I am trying to use the “Get an app’s user requests” API to retrieve user requests for an app in my Zoom account. However, I consistently receive a 403 Forbidden response with no response body.
• I am using a valid OAuth access token with the required scope: marketplace:read:app_request:admin.
• The app ID I am querying belongs to my account. I tried all app IDs that I got from GET https://api.zoom.us/v2/marketplace/apps.
• Other API requests with the same token (e.g., fetching app details) work correctly.

Error
I receive a 403 Forbidden response with no response body.
Response headers:

HTTP/1.1 403 Forbidden
Date: Wed, 19 Mar 2025 07:52:37 GMT
Content-Length: 0
Connection: keep-alive
x-zm-trackingid: v=2.0;sid=WEB_eed3e4aed3b666fc3a0ce274daa8fae0;rid=MP_ffaa8b6fc07065ee0df96f17a2c87207
x-mkt-region: VA2
x-ratelimit-category: Medium
x-content-type-options: nosniff
x-xss-protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
Server: cloudflare

How To Reproduce
Steps to reproduce the behavior:

1. **Request URL **: GET https://api.zoom.us/v2/marketplace/apps/4FOX4jrzQD6cs12NngQvmQ/requests?page_size=30&status=approved

2. Headers (excluding credentials) :

Accept: application/json
Authorization: Bearer <token>
User-Agent: PostmanRuntime/7.43.0
Host: api.zoom.us
Accept-Encoding: gzip, deflate, br
Connection: keep-alive

3. Authentication Method : OAuth 2.0

4. Response: 403 Forbidden with no response body

Can you confirm if there are any additional requirements for accessing this endpoint? Is there a reason why this request would be blocked despite having the required scope?

8 posts - 3 participants