---
title: "Zoom Deauthorize Webhook"
method: POST
path: "/callback/zoom/deauthorize"
tags: ["zoom-oauth"]
---

# Zoom Deauthorize Webhook

`POST /callback/zoom/deauthorize`

## Request

- Base URL: `https://app.getmanymeet.com` (the document declares no server; this is the origin it was published from)
- URL: `https://app.getmanymeet.com/callback/zoom/deauthorize`
- Auth: none declared

Handle Zoom deauthorization webhook.

Called by Zoom when a user removes ManyMeet from their Zoom account.
Required for Marketplace compliance.

Auth: verifies the Zoom signature against ``config.ZOOM_OAUTH_SECRET_TOKEN``,
identical to the /callback/zoom/all-hosts pattern. Zoom's URL validation
challenge (``endpoint.url_validation``) is answered before signature
verification, since the challenge itself is not signed.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/getmanymeet/apis/manymeet.md) · [All operations](https://skmtc.dev/getmanymeet/apis/manymeet/llms.txt) · [OpenAPI document](https://skmtc.dev/getmanymeet/apis/manymeet/revisions/f91a97d76df0?raw)