Breaking2025.06
Webhook URL validation enforcement and verification changes
Zoom is requiring manual validation of webhook endpoints and periodic revalidation every 72 hours. The webhook verification token is deprecated in favor of secret token and x-zm-signature header verification, with full enforcement by June 2025.
Tags: action-required | Zoom made changes to webhook validation and verification. Webhook endpoints now require initial manual validation and periodic validation every 72 hours. New webhooks created after October 23, 2022 will require validation. All webhooks will require validation by June 2025. The webhook verification token is deprecated and will be sunset in June 2025. There is a new way to verify webhooks using a secret token and x-zm-signature header.
webhookssecurityapimigrationaction-required
Source: original entry ↗
More from Zoom
Follow Zoom to get its new changes in your feed and email digest.
Feature
New response fields added for endpoints
Added head and style response fields to endpoints, expanding the available data returned by the API.
apiresponse-fieldsendpoints
Feature
New MCP tools for Workspace MCP Server
Added new MCP tools and associated scopes to the Workspace MCP Server, expanding integration capabilities.
mcptoolsapiworkspaceintegration
Feature
Added four new AI-credits billing APIs
Four new APIs for managing AI-credits billing have been added, enabling programmatic access to AI credit usage and billing information.
apibillingaicredits