Zoho Inventory
Connect Zoho Inventory to manage items, stock, warehouses, transfers, sales orders, packages, shipments, purchase orders and bills.
You paste the Client ID and Client secret of a Server-based Application you register in the Zoho API Console, then sign in with Zoho and pick the Zoho Inventory organization to connect.
- Setup time
- 6 min
- Auth
- OAuth authorization
- API base URL
- https://www.zohoapis.com/inventory/v1
- Rate limits
- Per organization: 100 requests a minute; a day, Free 1,000, Standard 2,000, Professional 5,000, Premium and Enterprise 10,000; at the same time, 5 on Free and 10 on paid plans. Zoho mints at most 10 access tokens per refresh token every 10 minutes.
Before you begin
- A Zoho Inventory organization on any plan, the Free plan included.
- A Zoho Inventory user role that can see what the AI should work with. An admin reaches everything.
- Knowing which Zoho data center your account lives in: the domain you sign in at, such as zoho.com, zoho.eu, zoho.in or zoho.com.au.
- PopMCP's callback URL from the connect form: https://app.popmcp.com/api/providers/zoho-inventory/callback
Get your credentials
Open the API Console for your data center
Sign in at api-console.zoho.com as the Zoho user whose Zoho Inventory access the AI should have. If your Zoho account lives in another data center, use that data center's console instead, for example api-console.zoho.eu, api-console.zoho.in or api-console.zoho.com.au. Click Get Started on your first visit, or Add Client if you already have clients.
Applications
Clients registered to call Zoho APIs with OAuth 2.0.
| Client name | Client type | Client ID |
|---|---|---|
| Reporting scriptCreated Mar 4, 2026 | Self Client | 1000.7Q2L****WK9T |
The console shows the clients of the data center you signed in to. A client made at api-console.zoho.eu does not appear at api-console.zoho.com.
Choose Server-based Applications
Pick Server-based Applications and click Create Now. PopMCP signs you in through a redirect, so the other client types, Self Client included, cannot complete the connection.
Choose a client type
The client type decides how users authorize your application.
| Client type | Use it for |
|---|---|
| Client-based Applications | Apps that run only in the browser |
| Server-based ApplicationsPick this one | Web apps with a server that redirect users to Zoho to authorize |
| Mobile-based Applications | Apps on phones and tablets |
| Non-browser Mobile Applications | Devices without a browser, such as smart TVs |
| Self Client | Back-end scripts with no redirect |
Server-based Applications is the only type that accepts PopMCP's redirect URL.
Name the client and add PopMCP's redirect URI
Enter a Client Name such as PopMCP and any Homepage URL, for example https://app.popmcp.com. Paste https://app.popmcp.com/api/providers/zoho-inventory/callback into Authorized Redirect URI, then click Create.
Server-based Applications
Enter the client's details.
Zoho matches the redirect URI exactly, so paste it from the PopMCP connect form rather than typing it.
Copy the Client ID and Client Secret
Open the Client Secret tab and copy Client ID (it starts with 1000.) and Client Secret. You only need the Settings tab if people in other data centers will sign in through this client: there you can turn on Multi-DC and tick their data centers.
PopMCP
Server-based Applications
- Client ID
- 1000.X8RT****MQ2Z
- Client Secret
- 4c1f****b07e
The Client ID stays the same in every data center; with Multi-DC on, Zoho can give each data center its own secret.
Paste both values into PopMCP, sign in and pick the organization
In PopMCP, paste the values into Client ID and Client secret. Only if you created the client outside zoho.com, open More options and type that data center into Zoho data center, for example EU, IN or AU. Click Sign in with Zoho and accept the permissions. PopMCP then lists your Zoho Inventory organizations: pick the one to connect and the workspace it belongs in.
Connect in PopMCP
Open your workspace, choose Zoho Inventory in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| Client IDtext | The "Client ID" on your app's Client Secret tab. |
| Client secretsecret | The "Client Secret" on the same tab. Stored encrypted and used only on the server.Encrypted with AES-256-GCM on save and never shown again. |
| Zoho data centertext | Only when your app was made outside zoho.com: the data center its console is in, e.g. EU (zoho.eu), IN, AU, JP, CA, SA or CN. One of: US, EU, IN, AU, JP, CA, SA, UK, AE, SG, CN. |
https://app.popmcp.com/api/providers/zoho-inventory/callbackAt api-console.zoho.com choose "Server-based Applications", set any homepage URL, and paste this exact URL as the Authorized Redirect URI.
PopMCP verifies the credential against Zoho Inventory immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Permissions PopMCP requests
These are the scopes sent to Zoho Inventory at authorization time.
| Scope | Why PopMCP asks for it |
|---|---|
| ZohoInventory.FullAccess.all | Reads and changes everything Zoho Inventory's API offers: items, stock, locations, sales and purchase orders, packages, shipments, invoices, bills and settings. PopMCP lists your organizations with it when you connect. Choose read-only access in PopMCP and every change is blocked, whatever this scope allows. |
Verify it worked
PopMCP shows Zoho Inventory as Connected under your organization's name, and zoho_inventory_get_organization returns that organization with its currency and time zone while zoho_inventory_list_items lists its products.
Troubleshooting
"Zoho did not accept the Client ID and Client secret for the United States data center"
Why: The client was created in another data center's console, such as api-console.zoho.eu, while **Zoho data center** was left empty, or one of the values was mistyped.
Fix: Type that data center (EU, IN, AU, JP, CA, SA, UK, AE, SG or CN) into **Zoho data center** under **More options**, or turn on Multi-DC on the client's **Settings** tab. Recopy both values from the **Client Secret** tab.
"Zoho rejected the redirect URI"
Why: The client's **Authorized Redirect URI** does not exactly match PopMCP's callback.
Fix: Open the client in the API Console, correct **Authorized Redirect URI** on the **Client Details** tab to `https://app.popmcp.com/api/providers/zoho-inventory/callback`, save, and connect again.
"The Zoho sign-in expired before it could be completed"
Why: Zoho's authorization codes last a minute or two, and the consent screen was left open too long.
Fix: Click **Sign in with Zoho** again and accept the consent screen without waiting.
"This Zoho account has no Zoho Inventory organization"
Why: You signed in with a Zoho account that has no Zoho Inventory organization in that data center.
Fix: Sign in with the Zoho account you use for Zoho Inventory, or start a Zoho Inventory organization first.
"Zoho Inventory refused to list your organizations"
Why: The permissions were not all accepted, or your Zoho Inventory role cannot see settings.
Fix: Connect again and accept every permission on the consent screen, or ask an admin to connect.
A tool says it needs a scope such as ZohoInventory.moveorder.READ
Why: The Zoho user's role does not allow it, or the connection signed in for reading only, which covers fewer parts of Zoho Inventory.
Fix: Ask an admin to allow it for that role. If the connection is read-only, allow write actions for it in PopMCP, then reconnect and accept the consent screen.
A working connection stops with "Zoho no longer accepts this connection's authorization"
Why: The refresh token was revoked, the password changed, or more than 20 connections were made for the same Zoho user, which makes Zoho retire the oldest.
Fix: Disconnect and reconnect Zoho Inventory.
A tool answers that it exceeded a call limit
Why: Zoho Inventory counts calls per organization: 100 a minute, a daily limit that depends on the plan, and a limit on calls at the same time.
Fix: Wait a minute for the per-minute limit, or until tomorrow for the daily one. Filter lists and use larger pages to spend fewer calls.