Two ways to connect
HubSpot supports a private-app token (recommended) and OAuth sign-in.- HubSpot API (recommended). A private-app token from your HubSpot account. No OAuth consent flow required, and you control exactly which scopes the token carries. See Connect with HubSpot API.
- HubSpot OAuth. Sign in with your HubSpot account. See Connect with OAuth.
What the agent can do
Read contacts
Pull contact records, properties, and activity history.
Manage deals
Create, update, and move deals through your pipeline stages.
Update records
Edit companies, contacts, and other CRM objects you grant access to.
Search the CRM
Find records by property, owner, stage, or custom filters.
Example agent tasks
Connect with HubSpot API
Create a private app in HubSpot, grant it the scopes your agents need, and paste the access token.1
Create a private app
Go to https://app.hubspot.com/private-apps, create a new private app, and grant the CRM scopes you want the agent to have.
2
Copy the access token
After saving, copy the access token from the Auth tab. It is only shown once.
3
Add the connection
From the agent’s connections, choose HubSpot and paste the token when prompted.
4
The agent gets to work
It calls the HubSpot CRM REST API directly, within the scopes the private app was granted.
Connect with OAuth
What you share
During the connect flow you authorize what the agent can reach. It works only within what you grant. As with every connection, the underlying token is handled securely and never exposed to the model. See Permissioning.1
Authorize HubSpot for the agent
From the agent’s connections, choose HubSpot and sign in.
2
Approve the access
Confirm what the agent can reach. You can change this later.
3
The agent gets to work
It works through the secure proxy, within what you granted.
Learn more
HubSpot API docs
The full reference for what’s possible.
How credentials stay safe
The proxy model that keeps tokens out of the agent’s reach.