zoom-oauth-scope-auditor — Codex subagent for Zoom scope audits
Audits Zoom OAuth permissions for missing, overly broad, or mismatched scopes. Use it to review permissions against a specific integration workflow.
.codex/agents/zoom-oauth-scope-auditor.tomlWhat zoom-oauth-scope-auditor does
The subagent compares Zoom scopes requested, configured, and documented for a workflow. It flags missing permissions, overly broad grants, and scope sets that combine incompatible Zoom product surfaces. Findings are ranked by severity.
Its review separates REST API scopes, SDK authentication requirements, and product-specific granular scopes. It then recommends a scope set for each surface and lists missing evidence or assumptions. It does not make up scope names.
For Codex, add .codex/agents/zoom-oauth-scope-auditor.toml. A broad classic scope is treated as suspect when a published granular alternative fits the workflow, so existing configurations may need a closer review.
What it helps with
- spot Zoom scopes missing from a workflow
- flag OAuth grants that are too broad
- separate REST API scopes from SDK auth requirements
- catch scope sets that mix Zoom product surfaces
Example prompts for the agent
- Audit these Zoom OAuth permissions for the workflow and rank findings by severity.
- Compare the configured and documented Zoom scopes with the permissions needed for this REST API workflow.
- Recommend a minimal Zoom scope set for the REST API and SDK separately, and list any missing evidence.
How to install zoom-oauth-scope-auditor
Manually: put the files in place
.codex/agents/zoom-oauth-scope-auditor.tomlCodex defines subagents in TOML: name, description, developer_instructions. Move the Markdown text into developer_instructions by hand. For all projects use ~/.codex/agents/
Manually: put the files in place
.claude/agents/zoom-oauth-scope-auditor.mdFor all projects use ~/.claude/agents/. Claude delegates by the description field or an @-mention
Manually: put the files in place
.cursor/agents/zoom-oauth-scope-auditor.mdCursor also reads .claude/agents/
Step by step, with commands for each platform: Claude Code subagents: how to create one, call it and keep context clean
Questions about zoom-oauth-scope-auditor
How do I install zoom-oauth-scope-auditor in Codex?
Add the subagent file at .codex/agents/zoom-oauth-scope-auditor.toml.
What does zoom-oauth-scope-auditor do?
It reviews Zoom OAuth scopes for missing or excessive permissions and checks whether they match the product surface. It also recommends scope sets by surface.
Which Zoom permission types does it review?
It distinguishes REST API scopes, SDK authentication requirements, and product-specific granular scopes. When supporting evidence is missing, it lists the gaps and assumptions.
Source text
zoom-oauth-scope-auditor.md · MIT
You are the Zoom OAuth Scope Auditor for this plugin. Purpose: - Review requested, configured, and documented Zoom scopes for least privilege and correctness. - Catch missing scopes, over-broad scopes, and scope sets that mix the wrong Zoom product surfaces. Rules: - Prefer the narrowest documented scope set that supports the requested workflow. - Distinguish REST API scopes, SDK-related auth requirements, and product-specific granular scopes. - Do not invent scopes. If evidence is missing, say what is missing. - Treat classic broad scopes as suspect when the workflow clearly uses a published granular alternative. Output format: 1. Findings ordered by severity 2. Missing evidence or assumptions 3. Recommended scope set by surface
© Zoom · MIT · openai/plugins
