HubSpot · OAuth Scopes

HubSpot OAuth Scopes

OAuth 2.0 searched

HubSpot publishes 29 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the HubSpot API on a user’s behalf.

Tokens are issued from https://api.hubapi.com/oauth/v1/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

AnalyticsCommerceContentCRMCustomer ServiceEmail MarketingMarketingMarketing AutomationSales
Scopes: 29 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://app.hubspot.com/oauth/authorize
Token URL
https://api.hubapi.com/oauth/v1/token
Flows
authorizationCode

Scopes (29)

ScopeDescriptionFlows
account-info.security.read Read account security activity logs authorizationCode
analytics.read Read analytics data authorizationCode
automation Access to automation API authorizationCode
cms.domains.read Read domains authorizationCode
cms.domains.write Create or update domains authorizationCode
cms.functions.read Read serverless functions (Content Hub Enterprise) authorizationCode
cms.functions.write Create or update serverless functions (Content Hub Enterprise) authorizationCode
cms.knowledge_base.articles.publish Publish knowledge base articles authorizationCode
cms.knowledge_base.articles.read Read knowledge base articles authorizationCode
cms.knowledge_base.articles.write Create or update knowledge base articles authorizationCode
cms.membership.access_groups.read Read membership access groups authorizationCode
cms.membership.access_groups.write Create or update membership access groups authorizationCode
communication_preferences.read Read subscription and communication preferences authorizationCode
communication_preferences.write Update subscription and communication preferences authorizationCode
content Read from and write to content authorizationCode
conversations.read Read access to conversations authorizationCode
conversations.write Write access to conversations authorizationCode
crm.objects.commerce_payments.read Read commerce payments authorizationCode
crm.objects.commerce_payments.write Write commerce payments authorizationCode
crm.objects.companies.read Read companies authorizationCode
crm.objects.companies.write Write companies authorizationCode
crm.objects.contacts.read Read contacts authorizationCode
crm.objects.contacts.write Write contacts authorizationCode
crm.objects.deals.read Read deals authorizationCode
crm.objects.deals.write Write deals authorizationCode
settings.billing.write Update billing configuration authorizationCode
settings.users.read Read users, teams, roles and seats authorizationCode
settings.users.write Create or update users, teams, roles and seats authorizationCode
transactional-email Send transactional emails and manage SMTP tokens authorizationCode

📄 Provider scope reference: https://developers.hubspot.com/docs/guides/apps/authentication/scopes

Source

OAuth Scopes

Raw ↑ 
generated: '2026-08-13'
method: searched
source: openapi/hubspot-analytics-events-api-openapi.yml, openapi/hubspot-authors-api-openapi.yml, openapi/hubspot-blog-posts-api-openapi.yml,
  openapi/hubspot-commerce-payments-api-openapi.yml, openapi/hubspot-conversations-api-openapi.yml, openapi/hubspot-crm-associations-api-openapi.yml,
  openapi/hubspot-custom-workflow-actions-api-openapi.yml, openapi/hubspot-domains-api-openapi.yml, openapi/hubspot-engagement-calls-api-openapi.yml,
  openapi/hubspot-engagement-notes-openapi.yml, openapi/hubspot-marketing-emal-api-openapi.yml, openapi/hubspot-source-code-api-openapi.yml
schemes:
- name: OAuth2
  source: openapi/hubspot-analytics-events-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-authors-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-blog-posts-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: oauth2Auth
  source: openapi/hubspot-commerce-payments-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-conversations-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-crm-associations-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: oauth2
  source: openapi/hubspot-custom-workflow-actions-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-domains-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-engagement-calls-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-engagement-notes-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-marketing-emal-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: oauth2
  source: openapi/hubspot-source-code-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
scopes:
- scope: account-info.security.read
  description: Read account security activity logs
  flows:
  - authorizationCode
  sources:
  - https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  method: searched
- scope: analytics.read
  description: Read analytics data
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-analytics-events-api-openapi.yml
- scope: automation
  description: Access to automation API
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-custom-workflow-actions-api-openapi.yml
- scope: cms.domains.read
  description: Read domains
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-domains-api-openapi.yml
- scope: cms.domains.write
  description: Create or update domains
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-domains-api-openapi.yml
- scope: cms.functions.read
  description: Read serverless functions (Content Hub Enterprise)
  flows:
  - authorizationCode
  sources:
  - https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  method: searched
- scope: cms.functions.write
  description: Create or update serverless functions (Content Hub Enterprise)
  flows:
  - authorizationCode
  sources:
  - https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  method: searched
- scope: cms.knowledge_base.articles.publish
  description: Publish knowledge base articles
  flows:
  - authorizationCode
  sources:
  - https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  method: searched
- scope: cms.knowledge_base.articles.read
  description: Read knowledge base articles
  flows:
  - authorizationCode
  sources:
  - https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  method: searched
- scope: cms.knowledge_base.articles.write
  description: Create or update knowledge base articles
  flows:
  - authorizationCode
  sources:
  - https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  method: searched
- scope: cms.membership.access_groups.read
  description: Read membership access groups
  flows:
  - authorizationCode
  sources:
  - https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  method: searched
- scope: cms.membership.access_groups.write
  description: Create or update membership access groups
  flows:
  - authorizationCode
  sources:
  - https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  method: searched
- scope: communication_preferences.read
  description: Read subscription and communication preferences
  flows:
  - authorizationCode
  sources:
  - https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  method: searched
- scope: communication_preferences.write
  description: Update subscription and communication preferences
  flows:
  - authorizationCode
  sources:
  - https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  method: searched
- scope: content
  description: Read from and write to content
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-authors-api-openapi.yml
  - openapi/hubspot-blog-posts-api-openapi.yml
  - openapi/hubspot-source-code-api-openapi.yml
- scope: conversations.read
  description: Read access to conversations
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-conversations-api-openapi.yml
- scope: conversations.write
  description: Write access to conversations
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-conversations-api-openapi.yml
- scope: crm.objects.commerce_payments.read
  description: Read commerce payments
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-commerce-payments-api-openapi.yml
- scope: crm.objects.commerce_payments.write
  description: Write commerce payments
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-commerce-payments-api-openapi.yml
- scope: crm.objects.companies.read
  description: Read companies
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-crm-associations-api-openapi.yml
- scope: crm.objects.companies.write
  description: Write companies
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-crm-associations-api-openapi.yml
- scope: crm.objects.contacts.read
  description: Read contacts
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-crm-associations-api-openapi.yml
  - openapi/hubspot-engagement-calls-api-openapi.yml
  - openapi/hubspot-engagement-notes-openapi.yml
- scope: crm.objects.contacts.write
  description: Write contacts
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-crm-associations-api-openapi.yml
  - openapi/hubspot-engagement-calls-api-openapi.yml
  - openapi/hubspot-engagement-notes-openapi.yml
- scope: crm.objects.deals.read
  description: Read deals
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-crm-associations-api-openapi.yml
- scope: crm.objects.deals.write
  description: Write deals
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-crm-associations-api-openapi.yml
- scope: settings.billing.write
  description: Update billing configuration
  flows:
  - authorizationCode
  sources:
  - https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  method: searched
- scope: settings.users.read
  description: Read users, teams, roles and seats
  flows:
  - authorizationCode
  sources:
  - https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  method: searched
- scope: settings.users.write
  description: Create or update users, teams, roles and seats
  flows:
  - authorizationCode
  sources:
  - https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  method: searched
- scope: transactional-email
  description: Send transactional emails and manage SMTP tokens
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-marketing-emal-api-openapi.yml
docs: https://developers.hubspot.com/docs/guides/apps/authentication/scopes
docs_note: The canonical scopes reference is served at https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes
  (HTTP 200). The newer /docs/reference/api/scopes path 307-redirects to a HubSpot login. The list below
  is the derived spec baseline PLUS scope families read from the public legacy reference; HubSpot's full
  scope registry is much larger than any single harvested spec declares, and only families verifiable
  on the public page are added here.
scope_families:
- family: crm.objects.<object>.<read|write>
  note: per CRM object type; Enterprise accounts additionally expose "sensitive" and "highly sensitive"
    data variants
- family: cms.<area>.<read|write|publish>
  note: domains, functions, knowledge base, membership
- family: settings.<area>.<read|write>
  note: users, billing
- family: <bare scope>
  note: legacy single-word scopes such as automation, content, transactional-email
request_model: 'Private apps: scopes are selected in the private-app settings. Public apps: required and
  optional scopes are configured on the app and presented to the installing user in the app install URL.
  Scope availability varies by account tier (Starter/Professional/Enterprise) and by Hub, so requesting
  a scope the account does not have will fail the install.'
scope_count: 29

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this
  • find_scopesBrowse and filter every scope set in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This scope set 
curl "https://apis.io/api/v1/scopes/hubspot-scopes"
All oauth scopes 
curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.