ZoomInfo APIs use OAuth 2.0 for authentication and authorization. OAuth allows applications to securely access ZoomInfo APIs on behalf of a user or service without sharing passwords or long-lived API-key credentials.

To access ZoomInfo APIs, you'll first need to create an application. Applications provide the credentials, permissions, and authentication settings required to securely access ZoomInfo data.

You can create and manage applications through the ZoomInfo Developer Portal or directly from GTM.ai if you're a self-serve customer.

Before You Begin

Make sure:

If you're ZoomInfo partner building applications, follow the Partner Application flow.
Requires a GTM.ai or Enterprise license with API access.
Enterprise customers require Developer Portal access. Contact your ZoomInfo admin if needed.
Identify the APIs and OAuth scopes your application requires before getting started.

If you're a GTM.ai self-serve customer, you can create applications directly from the GTM.ai platform. No additional Developer Portal access is required.

Create an Application

Follow these steps to create a ZoomInfo application, configure OAuth, select API permissions, and generate the credentials required to call ZoomInfo APIs.

1. Open App Creation Portal

Choose the option that applies to you:

Enterprise customers: Sign in to the ZoomInfo Developer Portal and select Create App.
GTM.ai self-serve customers: Sign in to GTM.ai, go to the Developer tab and select Create.

2. Enter Application Details

Provide the following details:

Application name
Application logo (optional)
Application description

3. Configure Authentication

ZoomInfo supports two OAuth 2.0 authentication methods. Choose the one that best fits your integration.
If you simply want to test the APIs, use the Test API Access flow to quickly generate an access token.

Authentication Method	Recommended For
Authorization Code Flow (PKCE)	Applications where users sign in with their ZoomInfo account
Client Credentials Flow	Server-to-server integrations without user login

Use the Client Credentials Flow when your application needs to access ZoomInfo APIs without requiring individual users to sign in. This is ideal for backend services, scheduled jobs, data synchronization, and internal integrations where data is exchanged directly between your servers and ZoomInfo.

Use the Authorization Code Flow with PKCE when your application needs to access ZoomInfo APIs on behalf of signed-in users. This flow allows multiple authorized users to securely connect their ZoomInfo accounts through a single application.

4. Configure Redirect URLs

If you're using Authorization Code Flow, provide one or more redirect URLs. After authentication, ZoomInfo redirects users back to these URLs with authorization information.

https://myapp.com/oauth/callback

5. Select API Scopes

Scopes determine which ZoomInfo APIs your application can access. Grant only the permissions required by your application. Learn more in the OAuth Scopes documentation.

Finally click Create App. Your application will be created immediately.

Retrieve Credentials

After creating the application, you'll receive:

Client ID
Client Secret

These credentials are required when authenticating with ZoomInfo APIs. Store them securely and never expose them in client-side applications.