Zoom App Marketplace

Workspace

Zoom Communications, Inc. · Productivity & collaboration suites

Best for: In-meeting and meeting-lifecycle tools that plug into Zoom workflows.

Overview

Zoom App Marketplace hosts apps that run inside meetings (Zoom Apps SDK), chat bots, and webhook-driven integrations against Zoom's REST APIs. OAuth 2.0 handles account-level and user-level authorization for public apps distributed through the marketplace.

How to build & ship

  1. 1Sign in to the Zoom App Marketplace and choose Develop > Build App (General app, or a Zoom App/SDK type)
  2. 2Fill in Basic Info; the build flow auto-generates development and production OAuth credentials
  3. 3Configure OAuth redirect URLs and request the API scopes your app needs
  4. 4Build the experience with the Zoom Apps SDK (in-client) and/or Zoom REST APIs and webhooks
  5. 5Complete the submission requirements checklist and submit the public app for review

Key APIs & SDKs

Zoom Apps SDK
Zoom REST API
OAuth 2.0 with scoped permissions
Zoom Webhooks / Event Subscriptions
Meeting SDK / Video SDK

Authentication & security

  • Primary auth: OAuth 2.0
  • Also supports: Webhook, JWT
  • Security review: Required
  • Marketplace review covers security questionnaire and UX guidelines before publishing.
  • Public apps go through a two-phase review — a Marketplace Operations review of metadata, usability, and compliance, then a Marketplace Security team audit and focused security test of the requested Zoom scopes.
  • Per-account rate limits vary by API category and Zoom plan.

Monetization

Onboarding
$0
Commission
0% direct; billing handled by developer
Merchant of Record
Developer is MoR

Pros & cons for builders

Pros

  • Distribution to Zoom's very large meeting/webinar user base
  • In-meeting Apps SDK enables genuinely embedded collaboration experiences
  • Guided build flow with separate dev/prod credentials
  • Broad API/webhook coverage across meetings, phone, and chat

Cons

  • Security audit and per-scope approval can be demanding and slow
  • Strict submission checklist across marketing, privacy, legal, and technical items
  • In-client app constraints (CSP, domain allow-lists) add engineering effort