# Zoho Desk (slim)

> Zoho Desk is a hosted helpdesk from Zoho for tickets, contacts, knowledge base articles and support channels. Agents reach it through the REST API v1 behind OAuth 2.0, described in public OpenAPI 3.1 files.

- Full: https://www.anchorterminal.com/tools/zoho-desk.md (~7,800 tokens) · this version ~1,830 tokens · JSON https://www.anchorterminal.com/tools/zoho-desk.json · canonical https://www.anchorterminal.com/tools/zoho-desk
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-09

**B · 66.6/100 · rank #262 of 842 · #3 in Customer support & helpdesk · not agent-ready · confidence medium**


Assessment: Public OpenAPI 3.1 files cover 911 operations, OAuth scopes separate read, create, update and delete per module, and replies can be saved as drafts or sent for review before a customer sees them. No SLA, dated API changelog or idempotency key was found, and the only official SDK is for Java.

## Facts

- Kind: HTTP API · vendor: Zoho · category: Customer support & helpdesk · legal entity: Zoho Corporation Private Limited · provenance 95/100
- Local only (HTTP)
- Auth: OAuth · pricing: Freemium · x402: no · licence: Proprietary service under Zoho's Terms of Service. The OpenAPI repository on GitHub has no licence file
- Probe metrics: not measured yet (probes haven't run)
- API: REST API v1 at https://desk.zoho.com/api/v1 (US). Tickets, threads, comments, contacts, accounts, agents, departments, tasks, articles, community, search, views, webhooks, automation and messaging endpoints. 911 operations in the OpenAPI files
- Credentials: OAuth 2.0 through Zoho Accounts, with server, client, mobile, device and self client flows. Access tokens last one hour. A refresh token is optional and lasts until revoked. Tokens are bound to one Desk organisation
- Auth scopes: `Desk.<module>.<operation>` with READ, CREATE, UPDATE, DELETE, WRITE and ALL. Modules include tickets, contacts, tasks, basic, search, events, articles, settings and custommodule
- Rate limits: Credits per day. Free and trial 5,000. Express 25,000 plus 100 a user. Standard 50,000 plus 250. Professional 75,000 plus 500. Enterprise 100,000 plus 1,000. At most 5,000,000 with add-ons. Concurrency 5, 10, 10, 15 and 25
- Credit costs: A record fetched by ID 1. List and search calls 3 to 100 by offset. Update many 1 per 2 records. Move to trash and restore 6 per record
- Rate limit headers: `X-Rate-Limit-Request-Weight-v3`, `X-Rate-Limit-Remaining-v3`, and `Retry-After` on a 429 at the daily limit
- Replies and notes: `sendReply`, `draftReply`, `sendDraft` and `sendForReview` on a ticket for email, Facebook and forum channels. Comments are public or private through `isPublic`
- Pagination: `from` and `limit`, default 10 and at most 50 a call. Search accepts `from` 0 to 4,999. `include` adds related resources
- Errors: HTTP status plus `errorCode`, `message` and, for invalid data, `errorType` and `fieldName` as a JSON Pointer
- Webhooks: Up to 20 configured a portal. Enabled 0 on Free and Standard, 5 on Professional, 10 on Enterprise, 20 on Ultimate. A callback must answer 200 within 5 seconds. JWT in `X-ZDesk-JWT`
- Data centres: US, EU, India, Australia, Canada, Japan, China, Saudi Arabia, Singapore and UAE, each with its own API host
- SDK: Java SDK 1.3.0 for Java 7 and above, a JAR download from zoho.com with a Maven guide
- Certifications: SOC 2 Type 2 naming Zoho Desk, ISO/IEC 27001, 27701, 27017 and 27018 valid to 21 August 2028 (https://www.zoho.com/compliance.html)
- Prices: Express $7 per seat per month; Standard $14 per seat per month; Professional $23 per seat per month; Enterprise $40 per seat per month; Add-on API credits, first 25,000 a day $0.0042 per credit

- Scores: Reliability 75, Performance pending, Schema & documentation 72, Agent ergonomics 67, Security & auth 66, Payments & pricing 40, Task success pending, Maintenance & community 63, Transparency & trust 79 · total over the 7 assessed categories
- Why: Reliability, Graded on the REST API v1, read as a hosted service. · Schema & documentation, zoho/zohodesk-oas on GitHub holds OpenAPI 3.1.0 files for 185 resources and 911 operations (25). · Agent ergonomics, Graded on the REST API. · Security & auth, OAuth 2.0 with scopes per module and operation, one-hour access tokens and revocable refresh tokens (30). · Payments & pricing, No x402, MPP or L402 (0). · Maintenance & community, The OpenAPI files were last changed on 9 September 2026, 29 days before this check (30). · Transparency & trust, Closed service under the Zoho Terms of Service, last updated 2 March 2022. The OpenAPI repository has no licence file (15 of 30).
- Sources: 21, open questions: 14, both in the full twin
- Capabilities: support.tickets, support.conversations, support.contacts, support.notes, support.webhooks
- JSON: https://www.anchorterminal.com/api/v1/tools/zoho-desk.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/zoho-desk.svg` or a link to https://www.anchorterminal.com/tools/zoho-desk from a page on zoho.com or one of its subdomains, or the README of github.com/zoho/zohodesk-oas, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Use the `api_domain` returned with the token. Each data centre has its own host, such as desk.zoho.com, desk.zoho.eu and desk.zoho.in
2. Send `Authorization: Zoho-oauthtoken <token>` and refresh hourly. Put refresh parameters in the POST body, not the URL
3. Create replies with `POST /api/v1/tickets/{id}/draftReply`, then `sendDraft` or `sendForReview`. `sendReply` emails the customer
4. Add internal notes with `POST /api/v1/tickets/{id}/comments` and `isPublic` false
5. Page with `from` and `limit` (50 at most). Deep offsets cost more credits, from 3 a call under 2,000 records to 100 above 100,000

## Connect

```bash
curl -X GET "https://desk.zoho.com/api/v1/tickets?limit=5" \
  -H "orgId: $ZOHO_DESK_ORG_ID" \
  -H "Authorization: Zoho-oauthtoken $ZOHO_ACCESS_TOKEN"
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/zoho-desk

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Intercom API + MCP | BB | 71.5 | support.tickets, support.conversations, support.contacts, support.notes, support.webhooks | https://www.anchorterminal.com/tools/intercom.min.md |
| Zendesk Support API | B | 68.7 | support.tickets, support.conversations, support.contacts, support.notes, support.webhooks | https://www.anchorterminal.com/tools/zendesk.min.md |
| Plain API + MCP | B | 65.5 | support.tickets, support.conversations, support.contacts, support.notes, support.webhooks | https://www.anchorterminal.com/tools/plain.min.md |
| Front API + MCP | B | 63.6 | support.tickets, support.conversations, support.contacts, support.notes, support.webhooks | https://www.anchorterminal.com/tools/front.min.md |
| Kustomer | C | 57.3 | support.tickets, support.conversations, support.contacts, support.notes, support.webhooks | https://www.anchorterminal.com/tools/kustomer.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)