Zoom setup guide

Agents read conversations and write messages for your company. Anything a customer or the public sees, such as a sent email or a posted message, is tier 3, so it asks first unless you decide otherwise.

Ways to connect

Company admins connect apps, on the Integrations page in Everdeck: open Zoom, choose one of the ways below, follow its steps and fill in its fields. Everdeck checks what you enter before it saves anything, and asks you to confirm it’s you (your second factor) before you type any secret. How connecting works.

Zoom can be connected 2 ways. Where there’s a key or token to paste, that’s usually the quickest.

Server-to-Server OAuth app (no sign-in)

Your OAuth app.

This way uses the client ID and secret of an OAuth app you create for Zoom. There’s no sign-in page: Everdeck asks Zoom for a token with them.

1. Sign in at https://marketplace.zoom.us as a Zoom admin whose role can manage Server-to-Server OAuth apps. Click Developer (lower left), then Build an app, choose Server-to-Server OAuth app and click Create.
2. On App credentials, copy the Account ID, Client ID and Client secret into the form.
3. On Information, fill in the app description and developer contact (needed to activate).
4. On Scopes, add the scopes listed below.
5. Leave Event Subscriptions on Feature turned off: live updates from Zoom (when a meeting ends or a summary is ready) aren't available yet, so leave the Secret Token empty. The transcript_ready trigger on the Intake page checks the user's cloud recordings every 15 minutes instead.
6. On Activation, click Activate your app. Enter the email of the Zoom user the agent schedules meetings and chats as (a licensed user; recordings and summaries need a Pro plan or higher).

Field	What to enter
Account ID	Text.
Zoom user the agent works as (email)	Email address. For example [email protected].
Secret Token (optional, not used yet)	A secret: Everdeck saves it encrypted and never shows it again. Live updates from Zoom aren't available yet; leave this empty.

The scopes Everdeck asks for:

• meeting:read:list_meetings:admin
• meeting:read:meeting:admin
• meeting:write:meeting:admin
• meeting:update:meeting:admin
• meeting:delete:meeting:admin
• cloud_recording:read:list_user_recordings:admin
• cloud_recording:read:list_recording_files:admin
• meeting:read:summary:admin
• meeting:read:list_past_participants:admin
• team_chat:read:list_user_channels:admin
• team_chat:write:user_message:admin

Disconnecting deletes the access token Everdeck saved for this connection. The OAuth app's client ID and secret stay saved under OAuth apps in Everdeck and keep working at Zoom until you delete the app or rotate its secret there.

Your Zoom OAuth app (sign in as the agent's user)

Your OAuth app.

This way signs in with an OAuth app you create for Zoom, as its steps describe: Everdeck never uses an app of its own. Register this redirect URI with your app:

https://everdeck.io/api/oauth/callback

Then save the app’s client ID and secret in Everdeck, on the connect page or under OAuth apps, and sign in.

1. Sign in at https://marketplace.zoom.us, click Developer (lower left), then Develop > Build an app, choose General app and click Create.
2. On Basic Info, set the app to User-managed. Under OAuth Information, enter https://everdeck.io/api/oauth/callback as the OAuth redirect URL and add it to the OAuth allow list. Copy the Client ID and Client Secret into the form.
3. Under Scopes, add the scopes listed below. Zoom takes scopes from the app, not from the sign-in link.
4. Leave Event Subscriptions under Features > Access turned off: live updates from Zoom aren't available yet, so leave the Secret Token empty. The transcript_ready trigger on the Intake page checks your cloud recordings every 15 minutes instead.
5. Click Connect and sign in as the Zoom user the agent should act as.

Field	What to enter
Secret Token (optional, not used yet)	A secret: Everdeck saves it encrypted and never shows it again. Live updates from Zoom aren't available yet; leave this empty.

The scopes Everdeck asks for:

• meeting:read:list_meetings
• meeting:read:meeting
• meeting:write:meeting
• meeting:update:meeting
• meeting:delete:meeting
• cloud_recording:read:list_user_recordings
• cloud_recording:read:list_recording_files
• meeting:read:summary
• meeting:read:list_past_participants
• team_chat:read:list_user_channels
• team_chat:write:user_message

When you disconnect, Everdeck asks Zoom to revoke the sign-in, then deletes the tokens it saved.

What agents can do

An agent uses an action only when its charter grants it, on the agent’s Tools tab, where you choose whether each one runs by itself (Auto), asks first or never runs. Each action has a risk tier: tier 3 actions, which customers or the public see, ask first unless you choose otherwise, and tier 4 actions (money, deleting things, access) always need a person. How tools and tiers work.

Actions marked Reads outside content return things people outside your company may have written. Agents treat what they read as information, never as instructions, and their riskier actions later in the same session need approval.

• List meetingsTier 0 · ReadReads outside contentzoom_list_meetings

  List the user's scheduled meetings (instant meetings aren't included). upcoming covers live and future meetings; previous_meetings looks back up to 6 months.

• Get a meetingTier 0 · ReadReads outside contentzoom_get_meeting

  Get a meeting's topic, time, agenda, status and join link.

• Schedule a meetingTier 2 · ReversibleReads outside contentzoom_create_meeting

  Schedule a meeting on the agent's Zoom user and get its join link and passcode to share. Zoom doesn't invite anyone; send the link yourself. start_time is local time in timezone, for example 2026-10-20T15:00:00 with Asia/Singapore.

• Change a meetingTier 3 · ExternalReads outside contentzoom_update_meeting

  Change a meeting's topic, time, duration or agenda, for example {"start_time": "2026-10-21T10:00:00", "timezone": "Asia/Singapore"}. Calendar invitations sent outside Zoom aren't updated, so tell attendees yourself.

• Cancel a meetingTier 4 · Money or irreversibleReads outside contentzoom_delete_meeting

  Delete a scheduled meeting (a recurring meeting's whole series). Optionally email registrants about the cancellation.

• List cloud recordingsTier 0 · ReadReads outside contentzoom_list_recordings

  List the user's cloud recordings between two dates (yyyy-MM-dd, at most one month apart), with each meeting's uuid, share link and file types (MP4, M4A, TRANSCRIPT, CHAT...).

• Read a meeting transcriptTier 0 · ReadReads outside contentzoom_get_transcript

  Read the text transcript of a recorded meeting (cloud recording with audio transcript turned on). Pass the meeting uuid for a specific occurrence, or the meeting id for its latest one.

• Read the AI meeting summaryTier 0 · ReadReads outside contentzoom_get_meeting_summary

  Read the AI Companion summary of a finished meeting: overview, section summaries and next steps. Needs the meeting uuid from list_meetings or list_recordings.

• List who attendedTier 0 · ReadReads outside contentzoom_list_past_participants

  List the participants of a finished meeting with join and leave times (meetings in the last 15 months).

• List Team Chat channelsTier 0 · ReadReads outside contentzoom_list_chat_channels

  List the Zoom Team Chat channels the agent's user belongs to.

• Post in a Team Chat channelTier 3 · Externalzoom_send_channel_message

  Post a message (up to 1,024 characters) in a Team Chat channel the user belongs to. Optionally reply in a thread.

• Message a Zoom contactTier 3 · Externalzoom_send_direct_message

  Send a Team Chat message (up to 1,024 characters) to a contact by email.

What can start work

These events from Zoom can become tasks for your agents through Intake. How Intake works.

A cloud recording's transcript is ready (checked every 15 minutes).

Connect Zoom first. Then, on the Intake page, open Webhooks and sources, find it under Connector triggers and select Start watching. Then, on the Rules tab, select New rule to say which requests become tasks and who gets them.

Testing, problems and disconnecting

Everdeck checks the connection when you save it. On the connection’s page in Integrations, Test checks it again at any time.

If Zoom later refuses the connection, for example because a key was deleted or a sign-in expired, the connection shows Needs attention on the Integrations page and the people who manage connections are told. Agents can’t use it until a company admin fixes it with Edit or Reconnect.

To stop agents using Zoom, open the connection and select Disconnect. Agents stop using it at once and its saved credentials are deleted. What else happens depends on how it was connected: each way above says.