---
title: "Process Zoom webhook events"
method: POST
path: "/i/zooms/webhook"
tags: ["zoom-webhook"]
---

# Process Zoom webhook events

`POST /i/zooms/webhook`

Authenticated via Zoom HMAC signature headers, not JWT. Also answers Zoom's endpoint URL validation challenge.

## Headers

- `X-Zm-Request-Timestamp` string, required
- `X-Zm-Signature` string, required

## Response `200`

OK

- HttpWebhookMessageResponse
  - `message` string

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `500` — Internal Server Error

---

[API](https://skmtc.dev/earnation/apis/earnation-api.md) · [All operations](https://skmtc.dev/earnation/apis/earnation-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/earnation/earnation-api/revisions/1219d1bf2177/schema)