Connect HubSpot

≈ 4 min Extension Bearer Token

Before you start

• A HubSpot account where you are a Super Admin (needed to create private apps).
• The AWFlow browser extension. These steps run in the extension (the web app hands them to it).

Used by

• HubSpot

Set it up

1. Create a private app. In HubSpot, open Settings › Integrations › Private Apps and click Create a private app.

2. Pick scopes. On the Scopes tab, add the scopes from the table below for the operations you use. Click Create app.

3. Copy the access token (it starts with pat-).

4. Save it in AWFlow. Open Credentials and click Add Credential (or + Add Credential in a node’s Credential field), then fill the New Credential form. In the browser side panel the form comes in two steps: tap HubSpot in the list, then fill the rest.

   12345

   1. 1 Step 1:Pick HubSpot Under Integration App / Service, pick HubSpot. There is no Auth Type menu: HubSpot uses a Bearer Token.
   2. 2 Step 2:Name it For example HubSpot – sales. A Description is optional.
   3. 3 Step 3:Paste the token Paste the token into Bearer Token.
   4. 4 Step 4:Check where it is saved Signed in, choose Local (this browser only) or Cloud (synced to your account) under Storage location. Without an account it is saved locally in this browser, as here.
   5. 5 Step 5:Click Create Credential Check: the credential is listed on the Credentials page, ready to pick in nodes.

   Numbered areas in the screenshot: 1. Integration App / Service: HubSpot; 2. Name; 3. Bearer Token; 4. Where the secret is stored (here, locally in this browser); 5. Create Credential.

Check it's connected — 

Run Contact › Search with an email you know: the contact comes back.

Where your token lives

Where your token lives — 

The credential is stored where you choose when you create it:

• Local (this browser only): encrypted in this browser. The encryption key is kept on the same device, so turn on the local secret vault to lock it with a passphrase only you know.
• Cloud (synced to your account): sent over an encrypted connection and stored encrypted on AWFlow’s server, so it works on your other devices.

When a step runs, your browser sends it only to api.hubapi.com. AWFlow’s servers never relay the call.

Privacy & your data →

Permissions each operation needs

Operation	Scope
Contact · Search	crm.objects.contacts.read
Contact · Create or update, Update	crm.objects.contacts.write (and .read)
Company · Search	crm.objects.companies.read
Company · Create or update	crm.objects.companies.write (and .read)
Deal · List	crm.objects.deals.read

Common issues

• “403 Forbidden — the private app token is missing a required scope”. Add the scope to the private app, then run again (the token stays the same).
• “401 Unauthorized”. The token is wrong or was rotated. Copy the current one and update the credential.
• The run is blocked in the web app. HubSpot runs through the browser extension. Install the extension and allow HubSpot for this workflow when asked, or run the workflow from the extension. See Extension-only integrations in the web app.

Related

HubSpot node

All connections

Create and manage credentials

Privacy & your data