setup-zoom-webhooks

Name: setup-zoom-webhooks
Availability: InStock
Author: Zoom

Verify Zoom webhook signatures and timestamps with Express.js handlers.

7|2|Updated Apr 2, 2026

Search Tags:#security #webhooks #zoom #signature-verification #webhook-delivery #endpoint-validation #event-subscriptions

Ready to run

npx skills add https://github.com/zoom/zoom-plugin --skill setup-zoom-webhooks

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: setup-zoom-webhooks
Source: https://github.com/zoom/zoom-plugin/tree/main/skills/webhooks
Command: npx skills add https://github.com/zoom/zoom-plugin --skill setup-zoom-webhooks

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Zoom webhook integration requires secure, verified delivery and correct handling of endpoint URL validation and event subscriptions.

Core Features & Use Cases

Signature verification and timestamp checking for each webhook request.
URL validation handling during endpoint setup.
Guidance for subscribing to events and delivering payloads to your services.
Real-world use: route Zoom events to your microservices with retries and idempotency.

Quick Start

Create a secure webhook endpoint and implement signature verification following the patterns in this skill.

Frequently Asked Questions about setup-zoom-webhooks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I verify Zoom webhook signatures to ensure request authenticity?▼

Verify Zoom webhook signatures by validating the request signature and checking timestamps to ensure authenticity. This prevents unauthorized webhook delivery by confirming each request originates from Zoom.

What is the best way to handle Zoom webhook endpoint URL validation?▼

Handle Zoom webhook endpoint URL validation by implementing specific logic during endpoint setup to respond to the validation challenge. This verifies your server is ready to receive event subscriptions securely.

Why do I need the raw request body for Zoom webhook signature verification in Express.js?▼

You need the raw request body for Zoom webhook signature verification because the signature is computed over the exact bytes received. A reusable Express.js handler captures this raw body to perform accurate cryptographic checks.

Can I route Zoom webhook events to microservices with retries and idempotency?▼

Yes, you can route Zoom webhook events to microservices with idempotent retries. Processing delivery with idempotency ensures duplicate webhook payloads do not trigger duplicate actions across your subscribed services.

Does this webhook verification approach require specific event subscription configurations?▼

Configuring event subscriptions is required to specify which Zoom events trigger webhook delivery. Guidance for subscribing to events and delivering payloads ensures your endpoints receive the correct notifications securely.