Integrations

Zoho Bigin

Connect Zoho Bigin to manage pipelines and deals, contacts, companies, products, tasks, events, calls, notes, tags, and customer emails.

You paste the Client ID and Client secret of a Server-based Application you register in the Zoho API Console, then sign in with Zoho and choose the Bigin organization to connect.

Setup time
6 min
Auth
OAuth authorization
API base URL
https://www.zohoapis.com/bigin/v2
Rate limits
Per organization over a rolling 24 hours, in API credits: Free 5,000; Express, Premier, Bigin 360 and Zoho One 50,000 plus 250 per user, up to 100,000. Most calls cost 1 credit, sending mail 20, starting a bulk read 50 and a bulk write 500. At the same time: Free 5 calls, the others 10.

Before you begin

  • A Bigin organization on any edition, the free one included.
  • A Bigin user whose role and profile can see what the AI should work with. An administrator reaches everything.
  • Knowing which Zoho data center your account lives in: the domain you sign in at, such as zoho.com, zoho.eu, zoho.in or zoho.com.au.
  • PopMCP's callback URL from the connect form: https://app.popmcp.com/api/providers/zoho-bigin/callback

Get your credentials

Open the API Console for your data center

Sign in at api-console.zoho.com as the Zoho user whose Bigin access the AI should have. If your Zoho account lives in another data center, use that data center's console instead, for example api-console.zoho.eu, api-console.zoho.in or api-console.zoho.com.au. Click Get Started on your first visit, or Add Client if you already have clients.

Open this screen →

api-console.zoho.com
ops@acme.com
API Console / Applications

Applications

Clients registered to call Zoho APIs with OAuth 2.0.

Add Client
Client nameClient typeClient ID
Reporting scriptCreated Mar 4, 2026Self Client1000.7Q2L****WK9T

The console shows the clients of the data center you signed in to. A client made at api-console.zoho.eu does not appear at api-console.zoho.com.

Choose Server-based Applications

Pick Server-based Applications and click Create Now. PopMCP signs you in through a redirect, so the other client types, Self Client included, cannot complete the connection.

Open this screen →

api-console.zoho.com/add
ops@acme.com
API Console / Applications / Choose a client type

Choose a client type

The client type decides how users authorize your application.

Client typeUse it for
Client-based ApplicationsApps that run only in the browser
Server-based ApplicationsPick this oneWeb apps with a server that redirect users to Zoho to authorize
Mobile-based ApplicationsApps on phones and tablets
Non-browser Mobile ApplicationsDevices without a browser, such as smart TVs
Self ClientBack-end scripts with no redirect
Create Now

Server-based Applications is the only type that accepts PopMCP's redirect URL.

Name the client and add PopMCP's redirect URI

Enter a Client Name such as PopMCP and any Homepage URL, for example https://app.popmcp.com. Paste https://app.popmcp.com/api/providers/zoho-bigin/callback into Authorized Redirect URI, then click Create.

Open this screen →

api-console.zoho.com/add
ops@acme.com
API Console / Applications / Server-based Applications

Server-based Applications

Enter the client's details.

Client details
Client Name
PopMCP
Homepage URL
https://app.popmcp.com
Authorized Redirect URI
https://app.popmcp.com/api/providers/zoho-bigin/callback
CreateCancel

Zoho matches the redirect URI exactly, so paste it from the PopMCP connect form rather than typing it.

Copy the Client ID and Client Secret

Open the Client Secret tab and copy Client ID (it starts with 1000.) and Client Secret. You only need the Settings tab if people in other data centers will sign in through this client: there you can turn on Multi-DC and tick their data centers.

Open this screen →

api-console.zoho.com/client/1000.X8RT****MQ2Z
ops@acme.com
API Console / PopMCP / Client Secret

PopMCP

Server-based Applications

Client DetailsClient SecretSettings
Client Secret
Client ID
1000.X8RT****MQ2Z
Client Secret
4c1f****b07e

The Client ID stays the same in every data center; with Multi-DC on, Zoho can give each data center its own secret.

Paste both values into PopMCP and sign in

In PopMCP, paste the values into Client ID and Client secret. Only if you created the client outside zoho.com, open More options and type that data center into Zoho data center, for example EU, IN or AU. Click Sign in with Zoho and accept the permissions. If you belong to several Bigin organizations, choose the one you want on Zoho's consent screen, because this connection reaches only that one.

Connect in PopMCP

Open your workspace, choose Zoho Bigin in the marketplace, and fill in the connect dialog:

FieldWhat to enter
Client IDtextThe "Client ID" on your app's Client Secret tab.
Client secretsecretThe "Client Secret" on the same tab. Stored encrypted and used only on the server.Encrypted with AES-256-GCM on save and never shown again.
Zoho data centertextOnly when your app was made outside zoho.com: the data center its console is in, such as EU (zoho.eu), IN, AU, JP, CA, SA or CN. One of: US, EU, IN, AU, JP, CA, SA, UK, AE, SG, CN.
Authorized Redirect URI
https://app.popmcp.com/api/providers/zoho-bigin/callback

At api-console.zoho.com choose "Server-based Applications", set any homepage URL, and paste this exact URL as the Authorized Redirect URI.

PopMCP verifies the credential against Zoho Bigin immediately. On success the connection flips to Verified and its MCP tools are provisioned.

Permissions PopMCP requests

These are the scopes sent to Zoho Bigin at authorization time.

ScopeWhy PopMCP asks for it
ZohoBigin.modules.contacts.READReads contacts.
ZohoBigin.modules.accounts.READReads companies, which Bigin's API calls Accounts.
ZohoBigin.modules.products.READReads products.
ZohoBigin.modules.pipelines.READReads pipeline records, the deals in your pipelines.
ZohoBigin.modules.tasks.READReads tasks.
ZohoBigin.modules.events.READReads calendar events.
ZohoBigin.modules.calls.READReads logged calls.
ZohoBigin.modules.notes.READReads notes on records.
ZohoBigin.modules.attachments.READReads and downloads files attached to records.
ZohoBigin.settings.modules.READLists your modules and their API names.
ZohoBigin.settings.fields.READReads each module's fields, so the AI uses the right names.
ZohoBigin.settings.layouts.READReads layouts, which is where Team Pipelines, sub-pipelines and stages are set out.
ZohoBigin.settings.related_lists.READReads each module's related lists.
ZohoBigin.settings.custom_views.READReads your saved custom views.
ZohoBigin.settings.tags.READReads tags and how many records carry each one.
ZohoBigin.settings.roles.READReads roles.
ZohoBigin.settings.profiles.READReads profiles.
ZohoBigin.settings.emails.READLists the addresses this user may send email from.
ZohoBigin.users.READReads the people in your organization, so records can be given an owner.
ZohoBigin.org.READReads your organization's name, currency and time zone. PopMCP checks your connection with it.
ZohoBigin.coql.READRuns read-only COQL queries.
ZohoBigin.bulk.READExports records in bulk.
ZohoBigin.notifications.READReads your notification channels.
ZohoBigin.Files.READDownloads files by their encrypted id.
ZohoSearch.securesearch.READBigin's search and record counts need this Zoho-wide search permission.
ZohoBigin.modules.ALLAdds, changes and deletes records, notes, attachments, photos and tags.
ZohoBigin.modules.contacts.ALLBigin names this for reading a contact's deals in one Team Pipeline.
ZohoBigin.modules.pipelines.ALLBigin names this for reading one Team Pipeline's deals.
ZohoBigin.modules.notes.ALLAdds, changes and deletes notes.
ZohoBigin.modules.attachments.ALLUploads and deletes attachments.
ZohoBigin.settings.ALLReads module settings and creates, changes and deletes tags.
ZohoBigin.users.ALLAdds, changes and removes users.
ZohoBigin.org.ALLSets your organization's logo.
ZohoBigin.bulk.ALLStarts bulk imports and reads their results.
ZohoBigin.notifications.ALLSets up, changes and turns off notification channels.
ZohoBigin.change_owner.CREATEGives records a new owner.
ZohoBigin.send_mail.all.CREATESends email from Bigin.
ZohoBigin.Files.CREATEUploads files, for example to attach to an email.
ZohoFiles.files.ALLUploads the zip file a bulk import needs.

Verify it worked

PopMCP shows Zoho Bigin as Connected under your organization's name, and zoho_bigin_get_org returns your organization while zoho_bigin_list_team_pipelines lists your pipelines and stages.

Troubleshooting

"Zoho did not accept the Client ID and Client secret for the United States data center"

Why: The client was created in another data center's console, such as api-console.zoho.eu, while **Zoho data center** was left empty, or one of the values was mistyped.

Fix: Type that data center (EU, IN, AU, JP, CA, SA or CN) into **Zoho data center** under **More options**, or turn on Multi-DC on the client's **Settings** tab. Recopy both values from the **Client Secret** tab.

"Zoho rejected the redirect URI"

Why: The client's **Authorized Redirect URI** does not exactly match PopMCP's callback.

Fix: Open the client in the API Console, correct **Authorized Redirect URI** on the **Client Details** tab to `https://app.popmcp.com/api/providers/zoho-bigin/callback`, save, and connect again.

"The Zoho sign-in expired before it could be completed"

Why: Zoho's authorization codes are short-lived, and the consent screen was left open too long.

Fix: Click **Sign in with Zoho** again and accept the consent screen without waiting.

"Zoho signed you in, but Bigin refused the request"

Why: You signed in with a Zoho account that has no Bigin organization in that data center.

Fix: Sign in with the Zoho account you use for Bigin. If you use more than one Zoho data center, check that the client is enabled for the one your Bigin organization is in.

"Your Bigin profile is not allowed to use the API, or the trial has ended"

Why: The person who signed in lacks the privilege in Bigin, or the organization's trial is over.

Fix: Ask a Bigin administrator to check your profile and the organization's plan, or connect as an administrator.

"This connection's Zoho sign-in does not include the permission for this call"

Why: The connection was made without that permission, for example a read-only sign-in trying to write. The message names the permission.

Fix: Allow write actions on the connection in PopMCP if this is a write, or connect Zoho Bigin again and accept every permission.

"Zoho no longer accepts this connection's authorization"

Why: The app was removed under Connected Apps, or more than 20 connections were made for the same Zoho user and client, which retires the oldest.

Fix: Disconnect Zoho Bigin in PopMCP and connect it again.

Reference

On this page