Before you start
- A HubSpot account with access to the relevant CRM objects.
Step-by-step
- 1
Connect
Integrations → HubSpot → Connect, then "Continue with HubSpot" and approve the requested read scopes.
- 2
Private app fallback
Alternatively create a Private App with the minimal scopes and paste its access token under manual setup.
Security best practices
- Request only the CRM read scopes you need; avoid write/admin scopes unless required.
- Validate inbound webhook signatures before trusting any HubSpot payload.
- Credentials are encrypted at rest with AES-256-GCM — they are never stored in plain text.
- Only organization owners and admins can create or modify a connection.
- Prefer OAuth where available: it issues short-lived, scoped, revocable tokens instead of long-lived secrets.
- When you must use a token, create a fine-grained, least-privilege token and rotate it periodically.