HubSpot · OAuth Scopes

HubSpot OAuth Scopes

OAuth 2.0 derived

HubSpot publishes 16 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the HubSpot API on a user’s behalf.

Tokens are issued from https://api.hubapi.com/oauth/v1/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

AnalyticsCommerceContentCRMCustomer ServiceEmail MarketingMarketingMarketing AutomationOperationsSales

Scopes: 16 Flows: authorizationCode Method: derived

OAuth endpoints

Authorization URL
https://app.hubspot.com/oauth/authorize

Token URL
https://api.hubapi.com/oauth/v1/token

Flows
authorizationCode

Scopes (16)

Scope	Description	Flows
analytics.read	Read analytics data	authorizationCode
automation	Access to automation API	authorizationCode
cms.domains.read	Read domains	authorizationCode
cms.domains.write	Create or update domains	authorizationCode
content	Read from and write to content	authorizationCode
conversations.read	Read access to conversations	authorizationCode
conversations.write	Write access to conversations	authorizationCode
crm.objects.commerce_payments.read	Read commerce payments	authorizationCode
crm.objects.commerce_payments.write	Write commerce payments	authorizationCode
crm.objects.companies.read	Read companies	authorizationCode
crm.objects.companies.write	Write companies	authorizationCode
crm.objects.contacts.read	Read contacts	authorizationCode
crm.objects.contacts.write	Write contacts	authorizationCode
crm.objects.deals.read	Read deals	authorizationCode
crm.objects.deals.write	Write deals	authorizationCode
transactional-email	Send transactional emails and manage SMTP tokens	authorizationCode

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-11'
method: derived
source: openapi/hubspot-analytics-events-api-openapi.yml, openapi/hubspot-authors-api-openapi.yml,
  openapi/hubspot-blog-posts-api-openapi.yml, openapi/hubspot-commerce-payments-api-openapi.yml,
  openapi/hubspot-conversations-api-openapi.yml, openapi/hubspot-crm-associations-api-openapi.yml,
  openapi/hubspot-custom-workflow-actions-api-openapi.yml, openapi/hubspot-domains-api-openapi.yml,
  openapi/hubspot-engagement-calls-api-openapi.yml, openapi/hubspot-engagement-notes-openapi.yml,
  openapi/hubspot-marketing-emal-api-openapi.yml, openapi/hubspot-source-code-api-openapi.yml
schemes:
- name: OAuth2
  source: openapi/hubspot-analytics-events-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-authors-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-blog-posts-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: oauth2Auth
  source: openapi/hubspot-commerce-payments-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-conversations-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-crm-associations-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: oauth2
  source: openapi/hubspot-custom-workflow-actions-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-domains-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-engagement-calls-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-engagement-notes-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: OAuth2
  source: openapi/hubspot-marketing-emal-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
- name: oauth2
  source: openapi/hubspot-source-code-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.hubspot.com/oauth/authorize
    tokenUrl: https://api.hubapi.com/oauth/v1/token
scopes:
- scope: analytics.read
  description: Read analytics data
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-analytics-events-api-openapi.yml
- scope: automation
  description: Access to automation API
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-custom-workflow-actions-api-openapi.yml
- scope: cms.domains.read
  description: Read domains
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-domains-api-openapi.yml
- scope: cms.domains.write
  description: Create or update domains
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-domains-api-openapi.yml
- scope: content
  description: Read from and write to content
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-authors-api-openapi.yml
  - openapi/hubspot-blog-posts-api-openapi.yml
  - openapi/hubspot-source-code-api-openapi.yml
- scope: conversations.read
  description: Read access to conversations
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-conversations-api-openapi.yml
- scope: conversations.write
  description: Write access to conversations
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-conversations-api-openapi.yml
- scope: crm.objects.commerce_payments.read
  description: Read commerce payments
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-commerce-payments-api-openapi.yml
- scope: crm.objects.commerce_payments.write
  description: Write commerce payments
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-commerce-payments-api-openapi.yml
- scope: crm.objects.companies.read
  description: Read companies
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-crm-associations-api-openapi.yml
- scope: crm.objects.companies.write
  description: Write companies
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-crm-associations-api-openapi.yml
- scope: crm.objects.contacts.read
  description: Read contacts
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-crm-associations-api-openapi.yml
  - openapi/hubspot-engagement-calls-api-openapi.yml
  - openapi/hubspot-engagement-notes-openapi.yml
- scope: crm.objects.contacts.write
  description: Write contacts
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-crm-associations-api-openapi.yml
  - openapi/hubspot-engagement-calls-api-openapi.yml
  - openapi/hubspot-engagement-notes-openapi.yml
- scope: crm.objects.deals.read
  description: Read deals
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-crm-associations-api-openapi.yml
- scope: crm.objects.deals.write
  description: Write deals
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-crm-associations-api-openapi.yml
- scope: transactional-email
  description: Send transactional emails and manage SMTP tokens
  flows:
  - authorizationCode
  sources:
  - openapi/hubspot-marketing-emal-api-openapi.yml