Setup Zoom Webhooks

From the author

AutoGineer summary

Install

Documentation by Zoom

// Express.js webhook handler
const crypto = require('crypto');

// Capture raw body for signature verification (avoid re-serializing JSON).
app.use(require('express').json({
  verify: (req, _res, buf) => { req.rawBody = buf; }
}));

app.post('/webhook', (req, res) => {
  // Verify webhook signature
  const signature = req.headers['x-zm-signature'];
  const timestamp = req.headers['x-zm-request-timestamp'];
  const body = req.rawBody ? req.rawBody.toString('utf8') : JSON.stringify(req.body);
  const payload = `v0:${timestamp}:${body}`;
  const hash = crypto.createHmac('sha256', WEBHOOK_SECRET)
    .update(payload).digest('hex');
  
  if (signature !== `v0=${hash}`) {
    return res.status(401).send('Invalid signature');
  }

  // Handle event
  const { event, payload } = req.body;
  console.log(`Received: ${event}`);
  
  res.status(200).send();
});

Files

{
  "event": "endpoint.url_validation",
  "payload": {
    "plainToken": "random_token_string"
  }
}

const crypto = require('crypto');

app.post('/webhook', (req, res) => {
  const { event, payload } = req.body;
  
  if (event === 'endpoint.url_validation') {
    const hashForValidation = crypto
      .createHmac('sha256', WEBHOOK_SECRET_TOKEN)
      .update(payload.plainToken)
      .digest('hex');
    
    return res.json({
      plainToken: payload.plainToken,
      encryptedToken: hashForValidation
    });
  }
  
  // Handle other events...
  res.status(200).send();
});

const crypto = require('crypto');

function verifyWebhook(req) {
  const signature = req.headers['x-zm-signature'];
  const timestamp = req.headers['x-zm-request-timestamp'];
  // Prefer raw body bytes captured by your framework to avoid JSON re-serialization mismatches.
  const body = req.rawBody ? req.rawBody.toString('utf8') : JSON.stringify(req.body);
  
  const message = `v0:${timestamp}:${body}`;
  const hash = crypto
    .createHmac('sha256', WEBHOOK_SECRET_TOKEN)
    .update(message)
    .digest('hex');
  
  const expectedSignature = `v0=${hash}`;
  
  return signature === expectedSignature;
}

Requirements and compatibility

Security

Related skills

• 

  Build MCP App

  AnthropicOfficial

  Build interactive UI widgets for MCP servers to render forms, pickers, and dashboards directly within the chat interface.

  Automation and integrationsClaude CodeClaude appsOpenAI Codex+14 more

  Apache-2.0GitHub stars of the source repository46.3k
• 

  MCP Integration

  AnthropicOfficial

  Comprehensive guide for integrating Model Context Protocol (MCP) servers into Claude Code plugins.

  Automation and integrationsClaude CodeClaude appsOpenAI Codex+14 more

  Apache-2.0GitHub stars of the source repository46.3k
• 

  Social Publishing

  Seth Hobson· Community

  Programmatically schedule and publish content across 13 social media platforms using the SocialClaw API.

  Automation and integrationsClaude CodeClaude appsOpenAI Codex+14 more

  MITGitHub stars of the source repository42.3k
• 

  Hermes Tweet

  Seth Hobson· Community

  Integrates X/Twitter research and action capabilities into the Hermes Agent framework with strict approval-gated security.

  Automation and integrationsClaude CodeClaude appsOpenAI Codex+14 more

  MITGitHub stars of the source repository42.3k
• 

  Paypal Integration

  Seth Hobson· Community

  A guide to integrating PayPal payment processing, including checkout flows, subscriptions, and IPN webhook handling.

  Automation and integrationsClaude CodeClaude appsOpenAI Codex+14 more

  MITGitHub stars of the source repository42.3k
• 

  Social Publishing Publisher

  Seth Hobson· Community

  An agent-driven social media publishing specialist for multi-platform campaign management via the SocialClaw API.

  Automation and integrationsClaude Code

  MITGitHub stars of the source repository42.3k

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download setup-zoom-webhooks.zip