Zoom links on any calendar event, without Zoom's app review
Your users connect Zoom through Pyas Auth, which Zoom has already approved, so you skip Zoom's Marketplace review, its security review and the weeks they take. Then you ask for a Zoom link on a Google Calendar or Outlook event, and Pyas creates the meeting on the host's Zoom account and puts the link on the event.
{
"accountId": "fe8b3509…",
"title": "Intro call",
"startsAt": "2026-11-03T15:00:00Z",
"endsAt": "2026-11-03T15:30:00Z",
"conferencing": { "provider": "zoom", "accountId": "9c41d2e7…" }
}{
"provider": "google",
"title": "Intro call",
"startsAt": "2026-11-03T15:00:00Z",
"conferencing": {
"provider": "zoom",
"joinUrl": "https://us06web.zoom.us/j/…",
"meetingId": "84519302716"
}
}Where Zoom surprises people
From Zoom's documentation and our own testing. The left column is what the Zoom API does. The right is what you get from Pyas.
Zoom's app review
Until Zoom reviews your app, only people on your own Zoom account can authorize it. The review wants a test plan with test logins, a reason for every scope, your full tech stack and an architecture diagram, then a security review against the OWASP Top 10. Zoom's staff have put publishing at 4 to 12 weeks, and every new scope is reviewed again.
Pyas: With Pyas Auth, hosts approve Pyas's Zoom app, which Zoom has already approved, on every plan. Nothing to submit. Switch to Native Auth when you want your own name there.
Meetings, not events
Creating a Zoom meeting puts nothing on anyone's calendar. You copy its join_url into a calendar event yourself, and keep the two in step.
Pyas: Ask for conferencing with provider zoom on a Google or Outlook event. Pyas creates the meeting and puts the link on the event.
Daily limits
Meeting creates and updates are limited to 100 per day per user, reset at 00:00 UTC. One shared host account runs out fast.
Pyas: Each person hosts on their own connected Zoom account, so the limit is theirs, not your whole app's.
Tokens
Server-to-Server OAuth tokens last an hour with no refresh token, and user tokens need refreshing and storing safely.
Pyas: Pyas stores and refreshes each person's Zoom authorization, and tells you when one needs reconnecting.
What a host needs
The person whose meeting it is connects their Zoom account once, alongside their calendar.
- A Zoom account
- Each host connects their own Zoom account through PyasConnect, with Pyas Auth or Native Auth.
- A calendar
- Their Google Calendar or Outlook account, where the event with the Zoom link goes.