Subchapter 158.3
concepts/mcp-architecture.mdMarkdown3 KBView on GitHub
Model Context Protocol (MCP) standardizes how AI systems connect to external tools and data sources. Zoom exposes hosted MCP surfaces that clients can discover and call over MCP.
| Transport | URL |
|---|---|
| Streamable HTTP (recommended) | https://mcp-us.zoom.us/mcp/zoom/streamable |
| SSE (fallback) | https://mcp-us.zoom.us/mcp/zoom/sse |
| Transport | URL |
|---|---|
| Streamable HTTP (recommended) | https://mcp-us.zoom.us/mcp/whiteboard/streamable |
| SSE (fallback) | https://mcp-us.zoom.us/mcp/whiteboard/sse |
Whiteboard MCP is covered by the dedicated skill ../whiteboard/SKILL.md.
Do not hardcode tool counts in client logic.
Use the MCP protocol tools/list response as the current source of truth for:
The current Zoom MCP surface is centered on:
If the task requires deterministic meeting CRUD, use the REST API skill instead of assuming those operations exist on the current Zoom MCP surface.
User OAuth is the primary documented path. Use user OAuth as the expected auth model for the bundled Zoom MCP servers in this plugin.
The hosted MCP surfaces advertise supported scopes through OAuth protected-resource metadata. Zoom MCP protected-resource metadata currently exposes:
ai_companion:read:searchmeeting:read:assetsmeeting:read:searchcloud_recording:read:contentcloud_recording:read:list_user_recordingsdocs:write:importdocs:read:exportWhiteboard MCP protected-resource metadata currently exposes:
whiteboard:write:whiteboardwhiteboard:read:list_whiteboardswhiteboard:read:whiteboardsearch_meetings is not just a title filter. It is a semantic retrieval path over meeting
content, recap-linked assets, and recording-linked artifacts.
Useful result families:
When writing parsers, validate the live response shape from the server rather than relying on older example field names.
AI Companion features such as Smart Recording and Meeting Summary are feature prerequisites for useful semantic retrieval and recap-linked content. They do not replace the required OAuth scopes.
Failures can happen at two layers:
-32001, -32602, -32603)