Generated banner for Zoom General
Generated logo for Zoom General

Zoom General

AnthropicOfficialCreated by ZoomDistributed by Anthropic

  • Skill
  • Meta (authoring, orchestration, planning, memory)
  • Agent tooling
  • MIT
  • Medium risk

From the author

Cross-product Zoom reference skill. Use after the workflow is clear when you need shared platform guidance, app-model comparisons, authentication context, scopes, marketplace considerations, or API-vs-MCP routing.
— the description by Zoom

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

The zoom-general skill serves as the primary entry point and classification layer for developers working with the Zoom platform. It provides a structured framework to identify the correct Zoom product, SDK, or API path based on user intent. It includes logic for routing complex queries, chaining multiple skills (such as combining REST APIs with OAuth and webhooks), and resolving ambiguities between deterministic automation and AI-driven agentic workflows.

What it does

  • Classifies developer queries to identify the appropriate Zoom product or SDK.
  • Provides a routing matrix to distinguish between REST API, MCP, and SDK use cases.
  • Offers guidance on choosing the correct Zoom app type (General, S2S, or Webhook-only).
  • Facilitates skill chaining for multi-step integrations like OAuth and webhook setups.
  • Provides decision frameworks for API vs. MCP and SDK vs. REST implementation paths.
  • Acts as a central index for all specialized Zoom developer skills.

When to use it

  • When you are unsure which Zoom SDK or API is required for your project.
  • When you need to determine if your task requires REST APIs, MCP tools, or a hybrid approach.
  • When planning a complex integration that involves authentication, webhooks, and API orchestration.
  • When you need to compare different Zoom app types to match your architectural requirements.
  • When you need to resolve ambiguity between similar Zoom products like Meeting SDK and Video SDK.

Advantages

  • Reduces development friction by directing users to the most relevant documentation and skills.
  • Ensures architectural consistency by enforcing standard routing patterns.
  • Simplifies complex decision-making through clear matrices and guardrails.
  • Promotes best practices for authentication and event-driven design.
  • Provides a unified entry point for navigating the entire Zoom developer ecosystem.

Usage examples

“I want to build a custom video UI for a Zoom meeting on the web, what should I use?”
The skill identifies the requirement for a custom UI around a real meeting and routes the user to the zoom-meeting-sdk-web-component-view skill.
“Should I use the REST API or MCP for my AI agent?”
The skill provides the API vs. MCP routing matrix, explaining that REST is for deterministic automation while MCP is for dynamic AI tool orchestration.
“How do I set up a server-side integration that handles meetings and webhooks?”
The skill suggests the Rivet SDK for scaffolding or chains the zoom-rest-api, zoom-oauth, and zoom-webhooks skills.

Install

  1. Download the skill as a ZIP:

    https://autogineer.com/agent-skills/anthropics/zoom-general/download
  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip zoom-general.zip -d .agents/skills

Documentation by Zoom

Zoom General (Cross-Product Skills)

Background reference for cross-product Zoom questions. Prefer the workflow skills first, then use this file for shared platform guidance and routing detail.

How zoom-general Routes a Complex Developer Query

Use zoom-general as the classifier and chaining layer:

  1. detect product signals in the query

  2. pick one primary skill

  3. attach secondary skills for auth, events, or deployment edges

  4. ask one short clarifier only when two routes match with similar confidence

Minimal implementation:

type SkillId =
  | 'zoom-general'
  | 'zoom-rest-api'
  | 'zoom-webhooks'
  | 'zoom-oauth'
  | 'zoom-meeting-sdk-web-component-view'
  | 'zoom-video-sdk'
  | 'zoom-mcp';

const hasAny = (q: string, words: string[]) => words.some((w) => q.includes(w));

function detectSignals(rawQuery: string) {
  const q = rawQuery.toLowerCase();
  return {
    meetingCustomUi: hasAny(q, ['zoom meeting', 'custom ui', 'component view', 'embed meeting']),
    customVideo: hasAny(q, ['video sdk', 'custom video session', 'peer-video-state-change']),
    restApi: hasAny(q, ['rest api', '/v2/', 'create meeting', 'list users', 's2s oauth']),
    webhooks: hasAny(q, ['webhook', 'x-zm-signature', 'event subscription', 'crc']),
    oauth: hasAny(q, ['oauth', 'pkce', 'token refresh', 'account_credentials']),
    mcp: hasAny(q, ['zoom mcp', 'agentic retrieval', 'tools/list', 'semantic meeting search']),
  };
}

function pickPrimarySkill(s: ReturnType<typeof detectSignals>): SkillId {
  if (s.meetingCustomUi) return 'zoom-meeting-sdk-web-component-view';
  if (s.mcp) return 'zoom-mcp';
  if (s.restApi) return 'zoom-rest-api';
  if (s.customVideo) return 'zoom-video-sdk';
  return 'zoom-general';
}

function buildChain(primary: SkillId, s: ReturnType<typeof detectSignals>): SkillId[] {
  const chain = [primary];
  if (s.oauth && !chain.includes('zoom-oauth')) chain.push('zoom-oauth');
  if (s.webhooks && !chain.includes('zoom-webhooks')) chain.push('zoom-webhooks');
  return chain;
}

Example:

  • Create a meeting, configure webhooks, and handle OAuth token refresh -> zoom-rest-api -> zoom-oauth -> zoom-webhooks

  • Build a custom video UI for a Zoom meeting on web -> zoom-meeting-sdk-web-component-view

For the full TypeScript implementation and handoff contract, use references/routing-implementation.md.

Choose Your Path

I want to...Use this skill
Build a custom web UI around a real Zoom meetingzoom-meeting-sdk-web-component-view
Build deterministic automation/configuration/reporting with explicit request controlzoom-rest-api
Receive event notifications (HTTP push)zoom-webhooks
Receive event notifications (WebSocket, low-latency)zoom-websockets
Embed Zoom meetings in my appzoom-meeting-sdk
Build custom video experiences (Web, React Native, Flutter, Android, iOS, macOS, Unity, Linux)zoom-video-sdk
Build an app that runs inside Zoom clientzoom-apps-sdk
Transcribe uploaded or stored media with AI Services Scribescribe
Access live audio/video/transcripts from meetingszoom-rtms
Enable collaborative browsing for supportzoom-cobrowse-sdk
Build Contact Center apps and channel integrationscontact-center
Build Virtual Agent web/mobile chatbot experiencesvirtual-agent
Build Zoom Phone integrations (Smart Embed, Phone API, webhooks, URI flows)phone
Build Team Chat apps and integrationszoom-team-chat
Build server-side integrations with Rivet (auth + webhooks + APIs)rivet-sdk
Run browser/device/network preflight diagnostics before joinprobe-sdk
Add pre-built UI components for Video SDKzoom-ui-toolkit
Implement OAuth authentication (all grant types)zoom-oauth
Build AI-driven tool workflows (AI Companion/agents) over Zoom datazoom-mcp
Build AI-driven Whiteboard workflows over Zoom Whiteboard MCPzoom-mcp/whiteboard
Build enterprise AI systems with stable API core + AI tool layerzoom-rest-api + zoom-mcp

Planning Checkpoint: Rivet SDK (Optional)

When a user starts planning a server-side integration that combines auth + webhooks + API calls, ask this first:

  • Rivet SDK is a Node.js framework that bundles Zoom auth handling, webhook receivers, and typed API wrappers.

  • Do you want to use Rivet SDK for faster scaffolding, or do you prefer a direct OAuth + REST implementation without Rivet?

Routing after answer:

  • If user chooses Rivet: chain rivet-sdk + oauth + rest-api.

  • If user declines Rivet: chain oauth + rest-api (+ webhooks or product skill as needed).

SDK vs REST Routing Matrix (Hard Stop)
User intentCorrect pathDo not route to
Embed Zoom meeting in app UIzoom-meeting-sdkREST-only join_url flow
Build custom web UI for a real Zoom meetingzoom-meeting-sdk-web-component-viewzoom-video-sdk
Build custom video UI/session appzoom-video-sdkMeeting SDK or REST meeting links
Get browser join links / manage meeting resourceszoom-rest-apiMeeting SDK join implementation

Routing guardrails:

  • If user asks for SDK embed/join behavior, stay in SDK path.

  • If the prompt says meeting plus custom UI/video/layout/embed, prefer zoom-meeting-sdk-web-component-view.

  • Only use zoom-video-sdk when the user is building a custom session product rather than a Zoom meeting.

  • Only use REST path for resource management, reporting, or link distribution unless user explicitly requests a mixed architecture.

  • For executable classification/chaining logic and error handling, see references/routing-implementation.md.

API vs MCP Routing Matrix (Hard Stop)
User intentCorrect pathWhy
Deterministic backend automation, account/user configuration, reporting, scheduled jobszoom-rest-apiExplicit request/response control and repeatable behavior
AI agent chooses tools dynamically, cross-platform AI tool interoperabilityzoom-mcpMCP is optimized for dynamic tool discovery and agentic workflows
Enterprise AI architecture (stable core + adaptive AI layer)zoom-rest-api + zoom-mcpAPIs run core system actions; MCP exposes curated AI tools/context

Routing guardrails:

  • Do not replace deterministic backend APIs with MCP-only routing.

  • Do not force raw REST-first routing when the task is AI-agent tool orchestration.

  • Prefer hybrid routing when the user needs both stable automation and AI-driven interactions.

  • MCP remote server works over Streamable HTTP/SSE; use this path when the target client/agent supports MCP transports (for example Claude or VS Code).

  • Do not design per-tenant custom MCP endpoint provisioning; Zoom MCP endpoints are shared at instance/cluster level.

  • Source: https://developers.zoom.us/docs/mcp/library/resources/apis-vs-mcp/

Ambiguity Resolution (Ask Before Routing)

When a prompt matches both API and MCP paths with similar confidence, ask one short clarifier before execution:

  • Do you want deterministic REST API automation, AI-agent MCP tooling, or a hybrid of both?

Then route as:

  • REST answer → zoom-rest-api

  • MCP answer → zoom-mcp

  • Hybrid answer → zoom-rest-api + zoom-mcp

MCP Availability and Topology Notes
  • Zoom-hosted MCP access is evolving; docs indicate a model where Zoom exposes product-scoped MCP servers (for example Meetings, Team Chat, Whiteboard).

  • Use zoom-mcp as the parent MCP entry point.

  • Route Whiteboard-specific MCP requests to zoom-mcp/whiteboard.

  • When a request is product-specific and MCP coverage exists, route to that MCP product surface first; otherwise use REST/SDK skills for deterministic implementation.

Webhooks vs WebSockets

Both receive event notifications, but differ in approach:

Aspectwebhookszoom-websockets
ConnectionHTTP POST to your endpointPersistent WebSocket
LatencyHigherLower
SecurityRequires public endpointNo exposed endpoint
SetupSimplerMore complex
Best forMost use casesReal-time, security-sensitive

Common Use Cases

Use CaseDescriptionSkills Needed
Meeting + Webhooks + OAuth RefreshCreate a meeting, process real-time updates, and refresh OAuth tokens safely in one designzoom-rest-api + zoom-oauth + zoom-webhooks
Scribe Transcription PipelineTranscribe uploaded files or S3 archives with AI Services Scribe using fast mode or batch jobsscribe + optional zoom-rest-api + optional zoom-webhooks
APIs vs MCP RoutingDecide whether to route to deterministic Zoom APIs, AI-driven MCP, or a hybrid designzoom-rest-api and/or zoom-mcp
Custom Meeting UI (Web)Build a custom video UI for a real Zoom meeting in a web app using Meeting SDK Component Viewzoom-meeting-sdk-web-component-view + zoom-oauth
Meeting AutomationSchedule, update, delete meetings programmaticallyzoom-rest-api
Meeting BotsBuild bots that join meetings for AI/transcription/recordingmeeting-sdk/linux + zoom-rest-api + optional zoom-webhooks
High-Volume Meeting PlatformDesign distributed meeting creation and event processing with retries, queues, and reconciliationzoom-rest-api + zoom-webhooks + zoom-oauth
Recording & TranscriptionDownload recordings, get transcriptszoom-webhooks + zoom-rest-api
Recording Download PipelineAuto-download recordings to your own storage (S3, GCS, etc.)zoom-webhooks + zoom-rest-api
Real-Time Media StreamsAccess live audio, video, transcripts via WebSocketzoom-rtms + zoom-webhooks
In-Meeting AppsBuild apps that run inside Zoom meetingszoom-apps-sdk + zoom-oauth
React Native Meeting EmbedEmbed meetings into iOS/Android React Native appszoom-meeting-sdk-react-native + zoom-oauth
Native Meeting SDK Multi-Platform DeliveryAlign Android, iOS, macOS, and Unreal Meeting SDK implementations under one auth/version strategyzoom-meeting-sdk + platform skills
Native Video SDK Multi-Platform DeliveryAlign Android, iOS, macOS, and Unity Video SDK implementations under one auth/version strategyzoom-video-sdk + platform skills
Electron Meeting EmbedEmbed meetings into desktop Electron appszoom-meeting-sdk-electron + zoom-oauth
Flutter Video SessionsBuild custom mobile video sessions in Flutterzoom-video-sdk-flutter + zoom-oauth
React Native Video SessionsBuild custom mobile video sessions in React Nativezoom-video-sdk-react-native + zoom-oauth
Immersive ExperiencesCustom video layouts with Layers APIzoom-apps-sdk
Collaborative AppsReal-time shared state in meetingszoom-apps-sdk
Contact Center App Lifecycle and Context SwitchingBuild Contact Center apps that handle engagement events and multi-engagement statecontact-center + zoom-apps-sdk
Virtual Agent Campaign Web and Mobile WrapperDeliver one campaign-driven bot flow across web and native mobile wrappersvirtual-agent + contact-center
Virtual Agent Knowledge Base Sync PipelineSync external knowledge content into Zoom Virtual Agent using web sync or custom API connectorsvirtual-agent + zoom-rest-api + zoom-oauth
Zoom Phone Smart Embed CRM IntegrationBuild CRM dialer and call logging flows using Smart Embed plus Phone APIsphone + zoom-oauth + zoom-webhooks
Rivet Event-Driven API OrchestratorBuild a Node.js backend that combines webhooks and API actions through Rivet module clientsrivet-sdk + zoom-oauth + zoom-rest-api
Probe SDK Preflight Readiness GateAdd browser/device/network diagnostics and readiness policy before Meeting SDK or Video SDK joinsprobe-sdk + zoom-meeting-sdk or zoom-video-sdk

Complete Use-Case Index

Prerequisites

  1. Zoom account (Pro, Business, or Enterprise)

  2. App created in Zoom App Marketplace

  3. OAuth credentials (Client ID and Secret)

References

Quick Start

  1. Go to marketplace.zoom.us

  2. Click Develop → Build App

  3. Select app type (see references/app-types.md)

  4. Configure OAuth and scopes

  5. Copy credentials to your application

Detailed References

SDK Maintenance

Resources

Environment Variables

Operations

  • RUNBOOK.md - 5-minute preflight and debugging checklist.

Files

use-cases/meeting-details-with-events.md

Meeting Details with Event Subscription

Retrieve meeting details and subscribe to real-time meeting events.

Overview

A common integration pattern: get meeting information via REST API, then receive real-time updates via webhooks when meeting events occur (started, ended, participants join/leave).

For implementation-heavy orchestration patterns (token refresh locks, retries, queue-based webhook handling, circuit-breaker and reconciliation fallbacks), see:

Skills Needed

OrderSkillPurpose
1zoom-rest-apiRetrieve meeting details
2webhooksSubscribe to and receive meeting events

Skill Chaining Flow

┌─────────────────────────────────────────────────────────────────────────┐
│                        COMPLETE INTEGRATION FLOW                         │
└─────────────────────────────────────────────────────────────────────────┘

SETUP PHASE (One-time):
┌─────────────────────────────────────────────────────────────────────────┐
│ 1. Configure Event Subscriptions (Marketplace Portal or API)            │
│    └── Subscribe to: meeting.started, meeting.ended,                    │
│        meeting.participant_joined, meeting.participant_left             │
└─────────────────────────────────────────────────────────────────────────┘
                                    │
                                    ▼
RUNTIME PHASE:
┌─────────────────────────────────────────────────────────────────────────┐
│ 2. GET Meeting Details (zoom-rest-api)                                  │
│    └── GET /meetings/{meetingId}                                        │
│    └── Store meeting info (topic, host, settings, join_url)             │
└─────────────────────────────────────────────────────────────────────────┘
                                    │
                                    ▼
┌─────────────────────────────────────────────────────────────────────────┐
│ 3. Receive Meeting Events (webhooks)                               │
│    └── meeting.started → Update status, notify users                    │
│    └── meeting.participant_joined → Track attendance                    │
│    └── meeting.participant_left → Log departure time                    │
│    └── meeting.ended → Finalize records, trigger post-processing        │
└─────────────────────────────────────────────────────────────────────────┘

Prerequisites

  • Zoom app with OAuth or Server-to-Server OAuth

  • Scopes: meeting:read (for REST API)

  • Event subscriptions configured for meeting events

  • HTTPS endpoint for receiving webhooks

  • See Authorization Patterns for scope validation and permission checking

Step 1: Configure Event Subscriptions

  1. Go to marketplace.zoom.us → Your App

  2. Navigate to Feature → Event Subscriptions

  3. Click Add Event Subscription

  4. Configure:

    • Subscription name: "Meeting Events"

    • Event notification endpoint URL: https://yourapp.com/webhooks/zoom

  5. Select events:

    • ✅ meeting.started

    • ✅ meeting.ended

    • ✅ meeting.participant_joined

    • ✅ meeting.participant_left

  6. Save and activate

Option B: Programmatic Setup

Event subscriptions are configured at app creation time in the Marketplace portal. However, you can verify your subscription status via API:

// List webhook subscriptions for your app
const response = await fetch(
  'https://api.zoom.us/v2/webhooks',
  {
    headers: { 'Authorization': `Bearer ${accessToken}` }
  }
);

const webhooks = await response.json();
console.log('Active webhooks:', webhooks);

Step 2: Retrieve Meeting Details (zoom-rest-api)

const axios = require('axios');

/**
 * Get meeting details from Zoom REST API
 * @param {string} meetingId - The meeting ID
 * @param {string} accessToken - Valid OAuth access token
 * @returns {Promise<Object>} Meeting details
 */
async function getMeetingDetails(meetingId, accessToken) {
  try {
    const response = await axios.get(
      `https://api.zoom.us/v2/meetings/${meetingId}`,
      {
        headers: {
          'Authorization': `Bearer ${accessToken}`
        }
      }
    );
    
    const meeting = response.data;
    
    return {
      id: meeting.id,
      uuid: meeting.uuid,
      topic: meeting.topic,
      type: meeting.type,
      status: meeting.status,
      start_time: meeting.start_time,
      duration: meeting.duration,
      timezone: meeting.timezone,
      host_id: meeting.host_id,
      host_email: meeting.host_email,
      join_url: meeting.join_url,
      password: meeting.password,
      settings: meeting.settings
    };
  } catch (error) {
    if (error.response?.status === 404) {
      throw new Error(`Meeting ${meetingId} not found`);
    }
    if (error.response?.status === 401) {
      throw new Error('Invalid or expired access token');
    }
    throw error;
  }
}

// Usage
const meeting = await getMeetingDetails('123456789', accessToken);
console.log(`Meeting: ${meeting.topic}`);
console.log(`Join URL: ${meeting.join_url}`);
console.log(`Host: ${meeting.host_email}`);

Step 3: Handle Meeting Events (webhooks)

const express = require('express');
const crypto = require('crypto');

const app = express();
app.use(express.json());

// Store meeting state (use database in production)
const meetingState = new Map();

/**
 * Verify Zoom webhook signature
 */
function verifyWebhookSignature(req, webhookSecret) {
  const signature = req.headers['x-zm-signature'];
  const timestamp = req.headers['x-zm-request-timestamp'];
  const payload = `v0:${timestamp}:${JSON.stringify(req.body)}`;
  
  const expectedSignature = `v0=${crypto
    .createHmac('sha256', webhookSecret)
    .update(payload)
    .digest('hex')}`;
  
  return signature === expectedSignature;
}

/**
 * Handle URL validation challenge (required for new subscriptions)
 */
function handleUrlValidation(req, res, webhookSecret) {
  const hashForValidation = crypto
    .createHmac('sha256', webhookSecret)
    .update(req.body.payload.plainToken)
    .digest('hex');
  
  return res.json({
    plainToken: req.body.payload.plainToken,
    encryptedToken: hashForValidation
  });
}

// Webhook endpoint
app.post('/webhooks/zoom', async (req, res) => {
  const WEBHOOK_SECRET = process.env.ZOOM_WEBHOOK_SECRET;
  
  // 1. Handle URL validation challenge
  if (req.body.event === 'endpoint.url_validation') {
    return handleUrlValidation(req, res, WEBHOOK_SECRET);
  }
  
  // 2. Verify webhook signature
  if (!verifyWebhookSignature(req, WEBHOOK_SECRET)) {
    console.error('Invalid webhook signature');
    return res.status(401).send('Invalid signature');
  }
  
  // 3. Process meeting events
  const { event, payload } = req.body;
  const meetingId = String(payload.object.id);
  
  console.log(`Received event: ${event} for meeting ${meetingId}`);
  
  try {
    switch (event) {
      case 'meeting.started':
        await handleMeetingStarted(meetingId, payload);
        break;
      case 'meeting.ended':
        await handleMeetingEnded(meetingId, payload);
        break;
      case 'meeting.participant_joined':
        await handleParticipantJoined(meetingId, payload);
        break;
      case 'meeting.participant_left':
        await handleParticipantLeft(meetingId, payload);
        break;
      default:
        console.log(`Unhandled event: ${event}`);
    }
    
    res.status(200).send();
  } catch (error) {
    console.error(`Error handling ${event}:`, error);
    // Return 200 to prevent Zoom from retrying
    // Log error for investigation
    res.status(200).send();
  }
});

// Event handlers
async function handleMeetingStarted(meetingId, payload) {
  const { object } = payload;
  
  // Initialize meeting state
  meetingState.set(meetingId, {
    topic: object.topic,
    host_id: object.host_id,
    start_time: object.start_time,
    participants: [],
    status: 'in_progress'
  });
  
  console.log(`✅ Meeting started: ${object.topic} (ID: ${meetingId})`);
  
  // Optional: Fetch full meeting details for additional context
  // const fullDetails = await getMeetingDetails(meetingId, accessToken);
}

async function handleMeetingEnded(meetingId, payload) {
  const { object } = payload;
  const state = meetingState.get(meetingId);
  
  if (state) {
    state.status = 'ended';
    state.end_time = object.end_time;
    state.duration = object.duration;
    
    console.log(`🏁 Meeting ended: ${state.topic}`);
    console.log(`   Duration: ${state.duration} minutes`);
    console.log(`   Total participants: ${state.participants.length}`);
    
    // Trigger post-meeting processing
    await processMeetingRecords(meetingId, state);
  }
}

async function handleParticipantJoined(meetingId, payload) {
  const { object } = payload;
  const participant = object.participant;
  const state = meetingState.get(meetingId);
  
  if (state) {
    state.participants.push({
      user_id: participant.user_id,
      user_name: participant.user_name,
      email: participant.email,
      join_time: participant.join_time,
      status: 'in_meeting'
    });
    
    console.log(`👋 ${participant.user_name} joined meeting ${meetingId}`);
  }
}

async function handleParticipantLeft(meetingId, payload) {
  const { object } = payload;
  const participant = object.participant;
  const state = meetingState.get(meetingId);
  
  if (state) {
    const p = state.participants.find(p => p.user_id === participant.user_id);
    if (p) {
      p.leave_time = participant.leave_time;
      p.status = 'left';
    }
    
    console.log(`👋 ${participant.user_name} left meeting ${meetingId}`);
  }
}

async function processMeetingRecords(meetingId, state) {
  // Save to database, generate reports, notify stakeholders, etc.
  console.log('Processing meeting records...');
  
  // Example: Calculate attendance stats
  const attendanceReport = {
    meeting_id: meetingId,
    topic: state.topic,
    duration_minutes: state.duration,
    total_participants: state.participants.length,
    participants: state.participants.map(p => ({
      name: p.user_name,
      email: p.email,
      joined: p.join_time,
      left: p.leave_time || state.end_time
    }))
  };
  
  console.log(JSON.stringify(attendanceReport, null, 2));
  
  // Clean up in-memory state
  meetingState.delete(meetingId);
}

app.listen(3000, () => {
  console.log('Webhook server running on port 3000');
});

Complete Integration Example

/**
 * Complete example: Meeting Dashboard Integration
 * 
 * Skills used:
 * 1. zoom-rest-api - Get meeting details
 * 2. webhooks - Real-time event updates
 */

const express = require('express');
const axios = require('axios');
const crypto = require('crypto');

const app = express();
app.use(express.json());

// In-memory store (use Redis/database in production)
const meetings = new Map();

// ============================================
// AUTHENTICATION HELPER
// ============================================

async function getAccessToken() {
  const credentials = Buffer.from(
    `${process.env.ZOOM_CLIENT_ID}:${process.env.ZOOM_CLIENT_SECRET}`
  ).toString('base64');
  
  const response = await axios.post(
    `https://zoom.us/oauth/token?grant_type=account_credentials&account_id=${process.env.ZOOM_ACCOUNT_ID}`,
    null,
    { headers: { 'Authorization': `Basic ${credentials}` } }
  );
  
  return response.data.access_token;
}

// ============================================
// STEP 1: REST API - Get Meeting Details
// ============================================

async function getMeetingDetails(meetingId) {
  const token = await getAccessToken();
  
  const response = await axios.get(
    `https://api.zoom.us/v2/meetings/${meetingId}`,
    { headers: { 'Authorization': `Bearer ${token}` } }
  );
  
  return response.data;
}

// API endpoint to fetch and track a meeting
app.get('/api/meetings/:meetingId', async (req, res) => {
  try {
    const { meetingId } = req.params;
    
    // Get meeting details from Zoom API (zoom-rest-api skill)
    const details = await getMeetingDetails(meetingId);
    
    // Store for tracking (webhook events will update this)
    meetings.set(meetingId, {
      ...details,
      participants: [],
      events: [],
      tracking_status: 'active'
    });
    
    res.json({
      success: true,
      meeting: {
        id: details.id,
        topic: details.topic,
        start_time: details.start_time,
        join_url: details.join_url,
        host_email: details.host_email
      },
      message: 'Meeting tracked. Events will be received via webhook.'
    });
  } catch (error) {
    res.status(error.response?.status || 500).json({
      success: false,
      error: error.message
    });
  }
});

// ============================================
// STEP 2: WEBHOOKS - Receive Meeting Events
// ============================================

function verifyWebhook(req) {
  const signature = req.headers['x-zm-signature'];
  const timestamp = req.headers['x-zm-request-timestamp'];
  const payload = `v0:${timestamp}:${JSON.stringify(req.body)}`;
  const expected = `v0=${crypto
    .createHmac('sha256', process.env.ZOOM_WEBHOOK_SECRET)
    .update(payload)
    .digest('hex')}`;
  
  return signature === expected;
}

app.post('/webhooks/zoom', async (req, res) => {
  // URL validation challenge
  if (req.body.event === 'endpoint.url_validation') {
    const hash = crypto
      .createHmac('sha256', process.env.ZOOM_WEBHOOK_SECRET)
      .update(req.body.payload.plainToken)
      .digest('hex');
    return res.json({
      plainToken: req.body.payload.plainToken,
      encryptedToken: hash
    });
  }
  
  // Verify signature
  if (!verifyWebhook(req)) {
    return res.status(401).send('Invalid signature');
  }
  
  const { event, payload } = req.body;
  const meetingId = String(payload.object.id);
  
  // Get or create meeting record
  let meeting = meetings.get(meetingId);
  if (!meeting) {
    // Meeting wasn't pre-fetched, create minimal record
    meeting = {
      id: meetingId,
      topic: payload.object.topic,
      participants: [],
      events: [],
      tracking_status: 'webhook_only'
    };
    meetings.set(meetingId, meeting);
  }
  
  // Log event
  meeting.events.push({
    type: event,
    timestamp: new Date().toISOString(),
    data: payload
  });
  
  // Update meeting state based on event
  switch (event) {
    case 'meeting.started':
      meeting.status = 'in_progress';
      meeting.actual_start_time = payload.object.start_time;
      console.log(`✅ Meeting started: ${meeting.topic}`);
      break;
      
    case 'meeting.ended':
      meeting.status = 'ended';
      meeting.end_time = payload.object.end_time;
      meeting.actual_duration = payload.object.duration;
      console.log(`🏁 Meeting ended: ${meeting.topic} (${meeting.actual_duration} min)`);
      break;
      
    case 'meeting.participant_joined':
      meeting.participants.push({
        ...payload.object.participant,
        status: 'in_meeting'
      });
      console.log(`👋 ${payload.object.participant.user_name} joined`);
      break;
      
    case 'meeting.participant_left':
      const p = meeting.participants.find(
        p => p.user_id === payload.object.participant.user_id
      );
      if (p) {
        p.status = 'left';
        p.leave_time = payload.object.participant.leave_time;
      }
      console.log(`👋 ${payload.object.participant.user_name} left`);
      break;
  }
  
  res.status(200).send();
});

// ============================================
// STEP 3: Query Meeting Status
// ============================================

app.get('/api/meetings/:meetingId/status', (req, res) => {
  const meeting = meetings.get(req.params.meetingId);
  
  if (!meeting) {
    return res.status(404).json({ error: 'Meeting not tracked' });
  }
  
  res.json({
    id: meeting.id,
    topic: meeting.topic,
    status: meeting.status || 'scheduled',
    participants_in_meeting: meeting.participants.filter(p => p.status === 'in_meeting').length,
    total_participants: meeting.participants.length,
    events_count: meeting.events.length,
    last_event: meeting.events[meeting.events.length - 1]?.type
  });
});

// ============================================
// START SERVER
// ============================================

app.listen(3000, () => {
  console.log('Server running on port 3000');
  console.log('');
  console.log('Endpoints:');
  console.log('  GET  /api/meetings/:id        - Fetch & track meeting (zoom-rest-api)');
  console.log('  GET  /api/meetings/:id/status - Get meeting status');
  console.log('  POST /webhooks/zoom           - Webhook receiver (webhooks)');
});

Meeting Event Types Reference

EventTriggerKey Payload Fields
meeting.startedHost starts meetingid, topic, host_id, start_time
meeting.endedMeeting endsid, end_time, duration
meeting.participant_joinedUser joinsparticipant.user_id, participant.user_name, participant.join_time
meeting.participant_leftUser leavesparticipant.user_id, participant.leave_time
meeting.sharing_startedScreen share beginsparticipant, sharing_details
meeting.sharing_endedScreen share endsparticipant

Error Handling

Common Errors and Solutions
ErrorCauseSolution
404 on GET /meetingsInvalid meeting IDVerify meeting ID exists
401 on API callExpired tokenRefresh access token
Invalid webhook signatureWrong secret or modified payloadVerify WEBHOOK_SECRET matches app config
Missing eventsSubscription not activeCheck Event Subscriptions in Marketplace
Retry Logic for REST API
async function getMeetingWithRetry(meetingId, maxRetries = 3) {
  for (let attempt = 1; attempt <= maxRetries; attempt++) {
    try {
      return await getMeetingDetails(meetingId);
    } catch (error) {
      if (error.response?.status === 429) {
        // Rate limited - wait and retry
        const retryAfter = error.response.headers['retry-after'] || 1;
        await new Promise(r => setTimeout(r, retryAfter * 1000));
        continue;
      }
      if (error.response?.status === 401 && attempt < maxRetries) {
        // Token expired - refresh and retry
        await refreshAccessToken();
        continue;
      }
      throw error;
    }
  }
}

Best Practices

  1. Fetch meeting details first - Get context before events arrive

  2. Handle events idempotently - Webhooks may be delivered multiple times

  3. Use meeting UUID for tracking - More reliable than meeting ID for recurring meetings

  4. Store events for audit - Log all events for debugging and compliance

  5. Implement retry logic - REST API calls may fail transiently

  6. Return 200 for webhooks - Even on processing errors, to prevent retries

Resources

Requirements and compatibility

Written for: Claude Code, Claude apps

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Claude Code frontmatter, Needs an MCP server

Security

What our scanner noticed· Medium risk

  • Possible data-exfiltration endpoints
  • Instructions that use the network

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Created by
Zoom
Publisher
Anthropic (Official)
Distributed by
Anthropic
Source
anthropics/knowledge-work-plugins · partner-built/zoom-plugin/skills/general · commit e050c2e
Licence
MIT License (redistribution allowed)
  • LICENSE (added by AutoGineer from partner-built/zoom-plugin/LICENSE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by Zoom or Anthropic.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download zoom-general.zip