HubSpot
Connect to HubSpot CRM for contacts, deals, and marketing automation.
Auth Model
Installation + User OAuth
Dual-credential model. An App is first installed into an organization or workspace (yielding an installation credential), then individual users authorize within that installation context (yielding user credentials). Authpipe manages both lifecycles.
Connection Flow
// Get the bot/app token (installation-level) const { credential: botToken } = await authpipe.getCredential({ provider: 'hubspot', tenantId: 'org_acme', credentialFor: 'installation', }); // Get a user-level token const { credential } = await authpipe.getCredential({ provider: 'hubspot', tenantId: 'org_acme', userId: 'user_123', credentialFor: 'user', });
// Both credentials are always valid — Authpipe handles refresh // Install the App into a workspace <InstallButton provider="hubspot" onInstall={(inst) => console.log('Installed!', inst)} />
Available Scopes
Permissions you can request when connecting to HubSpot.
oauth Basic OAuth scope required for all integrations
crm.objects.contacts.read Read contacts from the CRM
crm.objects.contacts.write Create and update contacts in the CRM
crm.objects.companies.read Read companies from the CRM
crm.objects.companies.write Create and update companies in the CRM
crm.objects.deals.read Read deals from the CRM
crm.objects.deals.write Create and update deals in the CRM
crm.objects.owners.read Read owner information from the CRM
crm.lists.read Read contact and company lists
crm.lists.write Create and update contact and company lists
crm.schemas.contacts.read Read contact property definitions
crm.schemas.companies.read Read company property definitions
crm.schemas.deals.read Read deal property definitions
forms Access to HubSpot forms and form submissions
content Access to CMS content (pages, blogs, templates)
automation Access to workflow automation
timeline Access to timeline events on CRM records
e-commerce Access to e-commerce features (products, line items)
tickets Read and write support tickets
crm.objects.marketing_events.read Read marketing events
crm.objects.marketing_events.write Create and update marketing events
oauth Basic OAuth scope required for all integrations
crm.objects.contacts.read Read contacts from the CRM
crm.objects.contacts.write Create and update contacts in the CRM
crm.objects.companies.read Read companies from the CRM
crm.objects.companies.write Create and update companies in the CRM
crm.objects.deals.read Read deals from the CRM
crm.objects.deals.write Create and update deals in the CRM
crm.objects.owners.read Read owner information from the CRM
crm.lists.read Read contact and company lists
crm.lists.write Create and update contact and company lists
forms Access to HubSpot forms and form submissions
What Authpipe handles for HubSpot
OAuth Orchestration
PKCE, state validation, callback handling, and provider-specific quirks — all automatic.
Encrypted Vault
AES-256-GCM encryption with per-tenant key isolation. OAuth tokens, API keys, and webhook secrets — never exposed to the frontend.
Silent Refresh
Proactive token refresh before expiry. SDK returns from local cache with zero latency.
Health Monitoring
Scheduled checks detect revoked tokens and expired credentials before users notice.
More CRM providers
Apollo
Access prospect data and manage sales engagement through Apollo using API key authentication.
Attio
Manage contacts, companies, and deals through Attio CRM using OAuth authentication.
Capsule CRM
Manage contacts, sales opportunities, and cases through Capsule CRM.
Close
Manage leads, contacts, and sales activities through Close CRM.
Ready to connect HubSpot?
Get your first 100 connections free. Set up in minutes with our SDK.