Integration
Cerebric Zoom Integration
Cerebric TeamThis page documents Cerebric's Zoom integration for reviewers from the Zoom App Marketplace. It describes what the integration does, the OAuth scopes it requests, how organisations install and uninstall it, what data we store, and how to verify the integration end-to-end with a test account.
1. Overview
Cerebric automatically generates Zoom meeting links for video appointments booked through our scheduling system. Practice administrators connect their organisation's Zoom account once via OAuth; every subsequent video booking gets a Zoom link generated on that account and embedded in the patient's confirmation email.
2. Who uses Cerebric
Cerebric is a clinical platform for psychology, psychiatry, and therapy practices. End users of the integration are clinicians, support staff, and clinic administrators who manage scheduling. Patients receive booking confirmation emails containing the generated Zoom link but never interact with the integration UI directly.
3. How users install the integration
Open Video Meetings settings
An organisation administrator signs in to Cerebric and navigates to Team → Scheduling → Video Meetings.
Click Connect with Zoom
The Connect button starts the OAuth flow on the organisation's Zoom account.
Authorise on Zoom
Zoom shows the requested scopes (meeting:write:meeting and user:read:user) and the connecting account. After approval, Zoom redirects back to https://app.cerebric.io/api/oauth/zoom/callback.
Cerebric wants to access your Zoom account
- Create scheduled Zoom meetings to generate join URLs
meeting:write:meeting - Read your account email to display the connected account
user:read:user
Connection confirmed
Cerebric shows a green “Connected” badge on the Zoom row plus the connected account email. Future video bookings will generate Zoom links automatically.
Reviewer note: The redirect URI above is the only callback registered with our Zoom app. It must appear in the app's redirect allow list.
4. How users use the integration
Once connected, every video booking created in Cerebric automatically generates a Zoom meeting on the connected organisation account. The flow is fully server-side; no clinician or patient action is required.
- The Zoom meeting is created at booking-creation time via
POST /users/me/meetings, not on demand. - The resulting
join_urland meeting ID are stored on theBookingrecord. - The link is included in the patient's booking confirmation email, reminder emails, and any reschedule notifications.
- Meetings are created on the connected service account (a dedicated bookings account), not on individual clinicians' personal Zoom accounts.
Booking detail with auto-generated Zoom link.
5. How users uninstall
There are two independent ways to remove the Zoom integration. Both result in Cerebric deleting the stored credential.
A. From Cerebric (primary path)
- Go to Team → Scheduling → Video Meetings.
- Click Disconnect next to the connected Zoom account.
- Cerebric immediately deletes the encrypted access and refresh tokens and clears
videoProvideron the organisation settings record. - Future bookings will not generate Zoom links until the organisation reconnects.
B. From Zoom (deauthorization)
Users may also uninstall the app from the Zoom App Marketplace, or admins may revoke it from their account's Marketplace admin panel. When this happens, Zoom sends an app_deauthorized event to Cerebric's registered Event Notification endpoint:
POST https://app.cerebric.io/api/oauth/zoom/deauthorize
Cerebric verifies the request signature using the Marketplace Verification Token, locates the organisation by Zoom account ID, and deletes the stored credential. The behaviour from that point onwards is identical to disconnecting from inside Cerebric.
6. OAuth scopes requested
The integration requests the minimum scopes required to create meeting links and identify the connected account.
| Scope | Purpose | What we do NOT do |
|---|---|---|
meeting:write:meeting | Create scheduled Zoom meetings via POST /users/me/meetings to obtain a join URL for each Cerebric video booking. | We do not modify, list, or delete other meetings on the account. We only operate on meetings created by Cerebric. |
user:read:user | Read the connected account's display name and email so we can show it in Cerebric settings (e.g., “Connected as bookings@clinic.com”). | We do not read profile data for any other user, do not enumerate the account's users, and do not request admin-level user data. |
7. Data handling and storage
What we store per connected organisation
- OAuth access token (encrypted at rest, AES-256-GCM)
- OAuth refresh token (encrypted at rest, AES-256-GCM)
- Token expiry timestamp
- Connected Zoom account email and account ID (plaintext, used to display the connection in settings and to match incoming deauthorization webhooks)
- Provider name (e.g.
"zoom")
What we generate and store on bookings
- Meeting join URL (plaintext)
- Zoom meeting ID (plaintext, used if the booking is later cancelled to clean up the corresponding Zoom meeting)
Retention
- Tokens are deleted immediately when an organisation disconnects from Cerebric or when the
app_deauthorizedwebhook fires. - Generated meeting URLs and meeting IDs are retained on the
Bookingrecord for the lifetime of that record per Cerebric's standard data retention policy. See our privacy policy for full details.
8. Reviewer test instructions
Reviewers can request a test account at app.cerebric.io by emailing support@cerebric.io.
To verify the integration:
- Sign in to Cerebric as an organisation administrator.
- Navigate to Team → Scheduling → Video Meetings.
- Click Connect with Zoom.
- Authorise using your own Zoom account on the consent screen.
- Confirm the connected account email is displayed in Cerebric settings with a green “Connected” badge.
- Navigate to Patients → “Test Patient” → Bookings → New Booking and create a video booking.
- Verify a Zoom join URL is generated and displayed on the booking detail.
- Open the generated link in a separate browser to confirm it joins a valid Zoom meeting.
- Return to Team → Scheduling → Video Meetings and click Disconnect.
- Confirm the credential is removed (the “Connect with Zoom” button reappears) and that no further bookings generate Zoom links.
- (Optional) Uninstall the app from the Zoom App Marketplace and confirm the same disconnected state appears in Cerebric within a few seconds, confirming the deauthorization webhook fired.
9. Support and contact
- Integration questions and reviewer enquiries: support@cerebric.io
- General contact: cerebric.io/contact
10. Change log
Last reviewed: 2026-05-03.