Zoho CRM · Authentication Profile

Zoho Crm Authentication

Authentication

Zoho CRM secures its APIs with oauth2 across 2 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode and clientCredentials flow(s).

CRMSalesMarketing AutomationLead ManagementCustomer EngagementSales AutomationContact ManagementPipeline ManagementSoftware-as-a-ServiceOpenAPIAuthentication
Methods: oauth2 Schemes: 2 OAuth flows: authorizationCode, clientCredentials API key in:

Security Schemes

iam-oauth2-schema oauth2
· flows: authorizationCode
iam-oauth2-schema oauth2
· flows: clientCredentials

Source

Authentication Profile

Raw ↑ 
generated: '2026-08-13'
method: derived
source: openapi/zoho-crm-apis-openapi.json, openapi/zoho-crm-appointment-preference-openapi.json,
  openapi/zoho-crm-appointments-openapi.json, openapi/zoho-crm-assignment-rules-openapi.json,
  openapi/zoho-crm-associate-email-openapi.json, openapi/zoho-crm-attachments-openapi.json,
  openapi/zoho-crm-audit-log-export-openapi.json, openapi/zoho-crm-available-currencies-openapi.json,
  openapi/zoho-crm-bulk-read-openapi.json, openapi/zoho-crm-bulk-write-openapi.json, openapi/zoho-crm-business-hours-openapi.json,
  openapi/zoho-crm-cadences-execution-openapi.json ...
summary:
  types:
  - oauth2
  oauth2_flows:
  - authorizationCode
  - clientCredentials
schemes:
- name: iam-oauth2-schema
  type: oauth2
  flows:
  - flow: authorizationCode
    authorizationUrl: https://accounts.zoho.com/oauth/v2/auth
    tokenUrl: https://accounts.zoho.com/oauth/v2/token
    scopes: 1
  sources:
  - openapi/zoho-crm-apis-openapi.json
  - openapi/zoho-crm-appointment-preference-openapi.json
  - openapi/zoho-crm-appointments-openapi.json
  - openapi/zoho-crm-assignment-rules-openapi.json
  - openapi/zoho-crm-associate-email-openapi.json
  - openapi/zoho-crm-attachments-openapi.json
  - openapi/zoho-crm-audit-log-export-openapi.json
  - openapi/zoho-crm-available-currencies-openapi.json
  - openapi/zoho-crm-bulk-read-openapi.json
  - openapi/zoho-crm-bulk-write-openapi.json
  - openapi/zoho-crm-business-hours-openapi.json
  - openapi/zoho-crm-cadences-execution-openapi.json
  - openapi/zoho-crm-cadences-openapi.json
  - openapi/zoho-crm-call-preferences-openapi.json
  - openapi/zoho-crm-cancel-meetings-openapi.json
  - openapi/zoho-crm-change-owner-openapi.json
  - openapi/zoho-crm-composite-requests-openapi.json
  - openapi/zoho-crm-contact-roles-openapi.json
  - openapi/zoho-crm-conversion-option-openapi.json
  - openapi/zoho-crm-convert-openapi.json
  - openapi/zoho-crm-coql-openapi.json
  - openapi/zoho-crm-currencies-openapi.json
  - openapi/zoho-crm-custom-views-openapi.json
  - openapi/zoho-crm-data-sharing-openapi.json
  - openapi/zoho-crm-deal-contact-roles-openapi.json
  - openapi/zoho-crm-deal-link-emails-openapi.json
  - openapi/zoho-crm-download-attachments-openapi.json
  - openapi/zoho-crm-download-inline-images-openapi.json
  - openapi/zoho-crm-duplicate-check-preference-openapi.json
  - openapi/zoho-crm-email-drafts-openapi.json
  - openapi/zoho-crm-email-templates-openapi.json
  - openapi/zoho-crm-emails-sharing-details-openapi.json
  - openapi/zoho-crm-features-openapi.json
  - openapi/zoho-crm-fetch-full-data-openapi.json
  - openapi/zoho-crm-field-updates-openapi.json
  - openapi/zoho-crm-fields-openapi.json
  - openapi/zoho-crm-files-openapi.json
  - openapi/zoho-crm-find-and-merge-openapi.json
  - openapi/zoho-crm-fiscal-year-openapi.json
  - openapi/zoho-crm-from-addresses-openapi.json
  - openapi/zoho-crm-get-related-records-count-openapi.json
  - openapi/zoho-crm-global-picklists-openapi.json
  - openapi/zoho-crm-holidays-openapi.json
  - openapi/zoho-crm-inventory-convert-openapi.json
  - openapi/zoho-crm-inventory-templates-openapi.json
  - openapi/zoho-crm-layouts-activate-deactivate-openapi.json
  - openapi/zoho-crm-layouts-openapi.json
  - openapi/zoho-crm-locking-informations-openapi.json
  - openapi/zoho-crm-mail-merge-openapi.json
  - openapi/zoho-crm-map-dependency-openapi.json
  - openapi/zoho-crm-mass-change-owner-openapi.json
  - openapi/zoho-crm-mass-convert-openapi.json
  - openapi/zoho-crm-mass-delete-cvid-openapi.json
  - openapi/zoho-crm-mass-update-openapi.json
  - openapi/zoho-crm-module-search-openapi.json
  - openapi/zoho-crm-modules-openapi.json
  - openapi/zoho-crm-notes-openapi.json
  - openapi/zoho-crm-notifications-openapi.json
  - openapi/zoho-crm-org-openapi.json
  - openapi/zoho-crm-org-photo-openapi.json
  - openapi/zoho-crm-ownership-history-openapi.json
  - openapi/zoho-crm-pick-list-values-openapi.json
  - openapi/zoho-crm-pipeline-openapi.json
  - openapi/zoho-crm-portal-user-type-openapi.json
  - openapi/zoho-crm-portal-users-openapi.json
  - openapi/zoho-crm-portals-openapi.json
  - openapi/zoho-crm-profiles-openapi.json
  - openapi/zoho-crm-record-count-openapi.json
  - openapi/zoho-crm-record-locking-configurations-openapi.json
  - openapi/zoho-crm-record-openapi.json
  - openapi/zoho-crm-record-photo-openapi.json
  - openapi/zoho-crm-record-share-email-openapi.json
  - openapi/zoho-crm-recycle-bin-openapi.json
  - openapi/zoho-crm-related-lists-openapi.json
  - openapi/zoho-crm-related-notes-openapi.json
  - openapi/zoho-crm-related-records-openapi.json
  - openapi/zoho-crm-roles-openapi.json
  - openapi/zoho-crm-scoring-rules-openapi.json
  - openapi/zoho-crm-send-mail-openapi.json
  - openapi/zoho-crm-service-preference-openapi.json
  - openapi/zoho-crm-services-openapi.json
  - openapi/zoho-crm-share-records-openapi.json
  - openapi/zoho-crm-shift-hours-openapi.json
  - openapi/zoho-crm-tags-actions-openapi.json
  - openapi/zoho-crm-tags-openapi.json
  - openapi/zoho-crm-territories-openapi.json
  - openapi/zoho-crm-territory-users-openapi.json
  - openapi/zoho-crm-timelines-openapi.json
  - openapi/zoho-crm-unblock-email-openapi.json
  - openapi/zoho-crm-unsubscribe-links-openapi.json
  - openapi/zoho-crm-upload-openapi.json
  - openapi/zoho-crm-user-groups-openapi.json
  - openapi/zoho-crm-users-openapi.json
  - openapi/zoho-crm-users-territories-openapi.json
  - openapi/zoho-crm-users-transfer-openapi.json
  - openapi/zoho-crm-variable-groups-openapi.json
  - openapi/zoho-crm-variables-openapi.json
  - openapi/zoho-crm-webhooks-openapi.json
  - openapi/zoho-crm-wizards-openapi.json
  - openapi/zoho-crm-workflow-configurations-openapi.json
  - openapi/zoho-crm-workflow-rules-openapi.json
  - openapi/zoho-crm-workflow-tasks-openapi.json
  - openapi/zoho-crm-zia-enrichment-openapi.json
  - openapi/zoho-crm-zia-org-enrichment-openapi.json
- name: iam-oauth2-schema
  type: oauth2
  flows:
  - flow: clientCredentials
    tokenUrl: https://accounts.zoho.com/oauth/v2/token
    scopes: 2
  sources:
  - openapi/zoho-crm-mass-delete-tags-openapi.json

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/zoho-crm-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.