Zoom Integration

Cloud vs self-hosted

On tymeslot.app, the Zoom app is already set up. Connect Zoom from the Video tab of your dashboard's Integrations page, approve Zoom's consent screen, and skip to Step 5.

Self-hosters need to create their own Zoom Marketplace app and set four environment variables. The rest of this guide walks through that process.

Prerequisites (self-hosters)

• A Zoom account, ideally on a paid plan (Pro, Business or Enterprise). Free accounts are subject to Zoom's own limits, including on meeting length.
• Access to the Zoom App Marketplace with developer permissions on your account.
• Your Tymeslot deployment running over HTTPS with a public hostname (Zoom does not allow plain-HTTP redirect URLs except http://localhost for local development).

1 Create the Zoom Marketplace app

1. Go to marketplace.zoom.us/develop/create and sign in with your Zoom account.
2. Click Build App → choose General App (not "Server-to-Server OAuth", and not the deprecated "JWT").
3. Set the app type to User-managed. Each Tymeslot user will authorise their own Zoom account.
4. Name your app, for example Tymeslot Self-Hosted . Users see this name on Zoom's consent screen.

2 Configure OAuth redirect and scopes

On the Marketplace app's Basic Information page, enter your callback URL as the OAuth redirect URL. Replace your-domain.com with your Tymeslot host:

https://your-domain.com/auth/zoom/video/callback

Zoom adds the redirect URL to the OAuth Allow List for you. Add any further URLs, such as a staging host, in the same Allow List section.

On the same page, scroll down to Deauthorization Notification and paste your deauthorization endpoint:

https://your-domain.com/auth/zoom/deauthorize

Zoom signs every deauthorization request with HMAC-SHA256 against the Secret Token shown in that same section. Copy it; you will set it as ZOOM_DEAUTH_SECRET in the next step. Zoom requires the deauthorization endpoint before you can submit the app for production review.

Then in the Scopes tab, add:

• meeting:write:meeting : create meetings on the user's behalf
• meeting:update:meeting : move the meeting when a booking is rescheduled
• meeting:read:meeting : verify meeting status
• meeting:delete:meeting : remove the meeting when a booking is cancelled
• user:read:user : fetch the connected user's profile for display

3 Set environment variables

From the Basic Information tab, copy your Client ID and Client Secret, and the Secret Token from the Deauthorization Notification section. Generate a random 32-byte state secret, which protects the sign-in flow against forged requests. Then add all four to your Tymeslot environment:

export ZOOM_CLIENT_ID="<your client id>"
export ZOOM_CLIENT_SECRET="<your client secret>"
export ZOOM_STATE_SECRET="$(openssl rand -hex 32)"
export ZOOM_DEAUTH_SECRET="<marketplace secret token>"

For Docker Compose deployments, add these to your .env file. For Cloudron, set them in the App Configure dialog. Restart Tymeslot after setting them.

4 Connect from the dashboard

1. Restart Tymeslot so it picks up the new env vars.
2. Go to Dashboard → Integrations → Video.
3. Click Connect a video provider and choose Zoom under Hosted services.
4. Approve Zoom's consent screen.
5. Zoom sends you back to Tymeslot, which shows a success notice.

5 Enable Zoom on a meeting type

Each meeting type chooses its own video providers. To use Zoom for a specific meeting type:

1. Go to Dashboard → Meeting Types and pick a meeting type.
2. On the Location & Calendar tab, click Add location, or Edit on an existing one, and set Type to Video call.
3. Under Video providers, tick your Zoom integration.
4. Click Save location. The next confirmed booking that uses this location will create a Zoom meeting and email the join link.

You can tick several providers on the same location, for example Zoom alongside Google Meet or Microsoft Teams. The person booking then chooses which one the room is created on. See Meeting Locations for everything a meeting type's locations can do.

Publishing the Marketplace app (optional)

While your Zoom app is in Development mode, only your own Zoom account can install it. That is fine when you are the only person on your Tymeslot instance who connects Zoom.

To let other users (for example team members or your customers) connect their own Zoom accounts to your Tymeslot deployment, submit the Marketplace app for publication via App Submission in the portal. Zoom's review typically takes one to three weeks. Meanwhile, you can allow individual Zoom accounts through the Marketplace's Beta Test → Add User form.

Zoom's review requires:

• A step-by-step test plan document (Google Doc, Confluence, or similar) covering app authorisation, each scope used, and the full booking flow. Add the link in the release notes at submission time.
• Test account credentials your reviewer can use to log in and walk through the integration. Include these in the release notes.
• A Zoom account with at least a paid plan (Pro or above) associated with the developer account. Free accounts need a credit card on file or a completed US compliance form before review can go ahead.

❓ Frequently Asked Questions

Verification Checklist

• Choosing Zoom under Connect a video provider, on the Video tab of Dashboard → Integrations, opens Zoom's consent screen.
• Authorising there brings you back to Tymeslot without errors.
• The connected integration shows your Zoom email address.
• Booking a test meeting on a Zoom-enabled meeting type creates a Zoom meeting, visible at zoom.us/meeting/scheduled .
• The confirmation email contains a Zoom join URL of the form https://zoom.us/j/... .
• Removing the app from zoom.us/profile → Apps → Tymeslot → Remove makes the integration disappear from the Tymeslot Video tab (Dashboard → Integrations) within seconds.