Zoom MCP Server: Tools, Setup and Security

Zoom's MCP servers let an AI app schedule and update meetings, pull AI summaries, transcripts and recordings, and read or send Zoom Team Chat messages. Zoom publishes and hosts them, with a separate server for each product area. This profile focuses on the Meetings and Chat servers, the two most relevant to day-to-day communication.

Checked against: Zoom MCP developer docs on 28 October 2026. eSEOspace did not install or test this server.

At a glance

What it can do

Zoom's Meetings MCP server page lists 8 tools, each with its scope:

• search_meetings (meeting:read:search)
• meeting_create (meeting:write:meeting)
• meeting_update (meeting:update:meeting)
• meeting_delete (meeting:delete:meeting)
• in_meeting_control (meeting:update:in_meeting_controls)
• get_meeting_assets (meeting:read:assets), for items such as AI summaries, transcripts and whiteboards
• recordings_list and get_recording_resource, for cloud recordings

The Chat MCP server page lists 20 tools. Zoom says the server is scoped to the caller's account, and that end-to-end encrypted, archived and policy restrictions apply. Highlights:

• Sends or changes messages: zoom_chat_message_send (team_chat:write:user_message) and zoom_chat_message_update.
• Reads messages: zoom_chat_messages_fetch, zoom_chat_messages_search, zoom_chat_messages_filter, zoom_chat_message_get_by_id and zoom_chat_message_replies_list.
• Channels: zoom_chat_channel_create, zoom_chat_channel_update, zoom_chat_channel_members_add, zoom_chat_channel_member_role_update, plus list, search and get tools.
• Contacts and files: zoom_chat_contact_add, zoom_chat_contacts_search, zoom_chat_contacts_get_by_id and zoom_chat_files_search.

No delete tool appears on the Chat server's list.

Zoom's Tasks MCP server page lists another 20 tools at https://mcp.zoom.us/mcp/tasks/streamable. They create, update and comment on tasks, manage assignees, collaborators and task steps, and read your task list. Some remove data: trash_task (tasks:delete:trash_task), delete_task_comment and delete_task_steps.

How to connect it

Zoom's connection guide says you need a Zoom account with admin or developer rights, credentials and licenses for the products you connect. The steps are:

1. Sign in to the Zoom App Marketplace, go to Develop, then Build app, and create a General app.
2. Under Scopes, add only the scopes listed for the tools you want.
3. For Claude, add a custom connector with the server URL plus the app's client ID and secret. In Zoom, set the redirect URL to https://claude.ai/api/mcp/auth_callback.
4. For ChatGPT, Zoom says to enable Developer Mode, create an app with OAuth, choose "User-Defined OAuth Client," enter the client ID and secret, and set the token auth method to client_secret_basic.

OpenAI's custom MCP server guide now says you don't need to turn on Developer Mode first: go to Plugins, select +, then Add custom MCP server, and finish with Create as a plugin. OpenAI lists custom servers for Business and Enterprise/Edu on ChatGPT web, with Pro limited to read/fetch, as of October 2026.

Zoom's pages differ on the host name. Each product page, such as the Meetings page, gives a URL on mcp.zoom.us, for example https://mcp.zoom.us/mcp/meeting/streamable. The servers overview gives "endpoint examples" without the mcp. subdomain: https://zoom.us/mcp/meeting/streamable and https://zoom.us/mcp/meeting/sse. Use the URL on the product page you are connecting.

Zoom's MCP overview also lists regional gateways, such as https://mcp-eu.zoom.us/ for the EU and https://mcp-us.zoom.us/ for the US.

Security notes

Zoom's per-tool scopes are the main safety lever. If you only want meeting recaps, add meeting:read:assets and the recording read scopes, and leave out meeting:delete:meeting and team_chat:write:user_message. Our lesson on least privilege in practice walks through this approach.

Things to watch:

• Sending as you: zoom_chat_message_send posts in Team Chat under the user's identity. Keep client approval on for it.
• Meeting changes: meeting_update, meeting_delete and in_meeting_control can disrupt live or scheduled meetings.
• Sensitive content: transcripts and recordings often hold confidential details. Pulling them into a chat sends that text to your AI provider. See MCP data exfiltration.
• Rate limits: Zoom says limits are shared by all apps installed on the account, so a busy agent can slow other integrations.

For broader guidance, visit our MCP security center.

Alternatives

• Webex MCP server, Cisco's hosted servers for Webex Meetings and messaging.
• Microsoft Teams MCP server, a legacy preview for Teams chats.
• Slack MCP server, for chat-centric teams.

Next step

If meeting notes and follow-ups are your goal, start with read-only Meetings scopes and add write scopes later. eSEOspace can help scope that rollout through an MCP readiness audit. More profiles are in our MCP server directory.

Frequently asked questions