Skip to main content
Ensure you have Admin privileges for your HubSpot account to create and configure OAuth applications.

​
Create a HubSpot OAuth application

Create a public app in the HubSpot developer portal to enable OAuth authentication.

1

Sign in to HubSpot

Sign in to your HubSpot account.

  • In the left sidebar, click More, then select Development (it is nested under the More menu, not a top-level item).
  • Within the Development section, click Legacy Apps.
HubSpot left sidebar with the More menu expanded and Development highlighted at the bottom of the list
2

Create a new app

Click Create legacy app in the upper right corner of the Legacy Apps page.

Important — new legacy public apps can no longer be created. In the Create Legacy App dialog (“What kind of legacy app do you want to create?”), the Public (For many accounts) option is now disabled and cannot be selected — HubSpot has stopped issuing new legacy public (OAuth) apps. You have two options (both described below).

  • Use an existing legacy public app you created before this change — open it from the Legacy Apps list and continue with the steps below.
  • Create a new public app with the HubSpot developer platform via the HubSpot CLI (hs project create), then configure its OAuth settings. The redirect URI and scope steps below apply to that app’s auth configuration.
Create Legacy App dialog showing the Public (For many accounts) option greyed out and disabled
3

Set the redirect URI

Open your public app and navigate to its Auth tab (for a CLI-built app, set this in the app’s auth configuration).

  • In the Redirect URL field, enter: https://api.stackone.com/connect/oauth2/hubspot/callback
  • Click Save.
4

Copy credentials

Copy your Client ID and Client Secret from the Auth tab.

  • Copy the Client ID value.
  • Click Show next to Client Secret to reveal it, then copy.
  • Store both securely for use later.
5

Configure scopes

In the Auth tab, scroll to the Scopes section. HubSpot supports required and optional scopes — at runtime, optional scopes are automatically dropped if the connecting user’s account lacks access. Importantly, every scope listed in the install URL must first be registered on this Scopes page; HubSpot will reject the install (and the account connection will fail) if the URL references a scope you have not added here. See HubSpot scopes documentation for details.

  • Mark only oauth as Required (minimum required scope).
  • Mark all the following scopes as Optional to support different user permission levels.
  • Required to connect successfully — every scope you intend to request must be added here as either Required or Optional. Omitting a scope from this page while still requesting it during connection will cause the OAuth install to fail.
6

List of optional scopes

Enables actions: Add Asset To Campaign, Batch Create Associations, Batch Create Companies, Batch Create Contacts, Batch Create Deals, Batch Read Associations, Batch Update Companies, Batch Update Contacts, Batch Update Deals, Clone Marketing Email, Create Association, Create CRM Object, Create Campaign, Create Company, Create Contact, Create Custom Object Association, Create Custom Object Schema, Create Deal, Create Deal Pipeline, Create Deal Pipeline Stage, Create Marketing Email, Create Ticket, Delete Association, Delete CRM Object, Delete Campaign, Delete Company, Delete Contact, Delete Custom Object Association, Delete Custom Object Schema, Delete Deal, Delete Marketing Email, Delete Ticket, Get CRM Object, Get Campaign, Get Company, Get Contact, Get Custom Object Schema, Get Deal, Get Deal Pipeline, Get Deal Pipeline Stage, Get Form, Get Marketing Email, Get Object Properties, Get Owner, Get Ticket, Get Ticket Pipeline, Get Ticket Pipeline Stage, Get Unified Group, Get Unified Role, Get Unified User, List Associations, List CRM Objects, List Campaign Assets, List Campaigns, List Companies, List Contacts, List Custom Object Schemas, List Deal Pipeline Stages, List Deal Pipelines, List Deals, List Form Submissions, List Forms, List Marketing Emails, List Owners, List Ticket Pipeline Stages, List Ticket Pipelines, List Tickets, List Unified Groups, List Unified Roles, List Unified Users, Publish Marketing Email, Remove Asset From Campaign, Search Companies, Search Contacts, Search Deals, Search Tickets, Update CRM Object, Update Campaign, Update Company, Update Contact, Update Custom Object Schema, Update Deal, Update Deal Pipeline, Update Deal Pipeline Stage, Update Marketing Email, Update Ticket

Add every scope below as Optional in your HubSpot app. If you register only a subset, you must list the same subset in the StackOne Auth Config’s Optional Scopes field (Step “Create the StackOne Auth Config” below) — otherwise the connection will fail because the install URL will reference scopes that aren’t registered in the app.

7

Save your configuration

Click Update after configuring all scopes to save your changes. Without this save step, the scopes are not persisted on the app and any connection attempt will fail with an OAuth scope error.

​
Creating the StackOne Connector Profile

To create the Connector Profile in StackOne for HubSpot:
1

Navigate to Connector Profiles

Login to StackOne and navigate to Connector Profiles
2

Create New Connector Profile

  • Click + Connector Profile
  • Search for and select HubSpot
  • Select Type as OAuth 2.0
  • Fill out the fields using details retrieved from your provider:
    • Client ID
    • Client Secret
    • Required Scopes (Optional)
    • Optional Scopes (Optional)
  • (Optional) Select Actions to be enabled for this Connector Profile
  • Click Create profile
Congratulations! The new Connector Profile will now show up in your project ready to be used. You can now continue to Link Accounts for HubSpot.