Help Doc Access Show

Authentication

Access to the Zoho Show APIs is secured using OAuth 2.0 or API key authentication.

OAuth 2.0 for Authentication

Use the Zoho OAuth 2.0 authorization code flow to obtain an access token, then pass it as 'Authorization: Zoho-oauthtoken <token>'. Request the per-method scope required by the endpoint: ZohoShow.showdocslist.READ, ZohoShow.showdocslist.CREATE, ZohoShow.showdocslist.UPDATE, or ZohoShow.showdocslist.DELETE. Learn more ↗

API Key for Authorization

Include your API key in the x-show-apikey request header to authorize requests, as an alternative to OAuth 2.0.

Need an API key? Request one from Zoho Show support at support@zohoshow.com

OAuth 2.0 Flow

Show uses the standard OAuth 2.0 authorization code flow. Follow these steps to authenticate:

Authentication Steps

  1. Register your application — Get your client ID and secret
  2. Redirect user to authorization URL — User grants permissions
  3. Exchange authorization code — Get access and refresh tokens
  4. Make API requests — Include access token in authorization header
  5. Refresh tokens — Use refresh token to get new access tokens

Example Request

Use either an OAuth access token or an API key. Do not send both unless instructed by Show support.

HTTP
GET /api/v1/presentation HTTP/1.1 Host: show.zoho.com Authorization: Zoho-oauthtoken YOUR_ACCESS_TOKEN Content-Type: application/json # API key alternative GET /api/v1/presentation HTTP/1.1 Host: show.zoho.com x-show-apikey: YOUR_API_KEY Content-Type: application/json

Error Responses

Authentication failures return one of the following HTTP status codes:

  • 401 Unauthorized — Invalid or missing authentication credentials
  • 403 Forbidden — Valid credentials but insufficient permissions
  • 429 Too Many Requests — Rate limit exceeded

OAuth Scopes & Access Levels

  • presentations - Grants access to presentation-level operations, including creating, reading, updating, and deleting presentations.
    Method OAuth Scope
    GET ZohoShow.showdocslist.READ
    POST ZohoShow.showdocslist.CREATE
    PUT ZohoShow.showdocslist.UPDATE
    DELETE ZohoShow.showdocslist.DELETE
  • search - Additional scopes required for the Search Presentations endpoint.
    Method OAuth Scope
    GET ZohoShow.showdocslist.READ, ZohoSearch.securesearch.READ, WorkDrive.team.READ, WorkDrive.organization.READ
  • workspace - Additional scopes required for the List Workspaces endpoint.
    Method OAuth Scope
    GET ZohoShow.showdocslist.READ, WorkDrive.organization.READ, WorkDrive.team.READ