# HubSpot

Create a HubSpot private app and send us its access token. About 5 minutes.

> **AI agents:** follow the rules at https://guide.upliftedconsulting.com/start-here/for-ai-agents.md. Never show the key in chat; deliver it only through a OneTimeSecret link.

> **Good to know:**
> - **What we need:** 1 access token from a private app
> - **Time:** about 5 minutes
> - **Who can do this:** a **Super Admin** in your HubSpot account
> - **Plan needed:** works on all HubSpot plans, including Free

> **Note:**
> HubSpot no longer has simple "API keys". Instead you create a small private app. It sounds technical, but it is just a form.

## Before you start

- Log in details for a HubSpot user with **Super Admin** rights.
- [OneTimeSecret](https://eu.onetimesecret.com) open in another tab. You will use it to send the token. [How it works](https://guide.upliftedconsulting.com/start-here/sending-securely.md).

## Create the app and get the token

### Step 1: Open Legacy apps

Log in to HubSpot. In the main menu, click **Development**. Then click **Legacy apps** in the left sidebar.

### Step 2: Start a new private app

Click **Create legacy app** (top right). In the pop-up, choose **Private**.

### Step 3: Name it

On the **Basic Info** tab, type a name, for example "Uplifted Consulting". Logo and description are optional.

### Step 4: Add the scopes

Open the **Scopes** tab. Click **Add new scope**. Use **Find a scope** to search for each of these and tick them:
- `crm.objects.contacts.read` and `crm.objects.contacts.write`
- `crm.objects.companies.read` and `crm.objects.companies.write`
- `crm.objects.deals.read` and `crm.objects.deals.write`
- `crm.objects.owners.read`

Then click **Update**.

> **Tip:**
> If we sent you a different list, use ours instead.

### Step 5: Create the app

Click **Create app** (top right). Read the pop-up, then click **Continue creating**.

### Step 6: Copy the access token

Open the **Auth** tab. Click **Show token**, then **Copy**.

> **Careful:**
> Copy the whole token. It is long and usually starts with `pat-`.

## Send it to us

- [Send it with OneTimeSecret](https://guide.upliftedconsulting.com/start-here/sending-securely.md): Paste the token into OneTimeSecret, create the link, and send us **only the link**. Label it "HubSpot access token".

## Something not right?

### I don't see Development or Legacy apps

You probably are not a Super Admin. Ask a Super Admin in your company to do these steps.
On some older accounts the same thing lives under **Settings** (gear icon) > **Integrations** > **Private Apps**. The steps after that are the same.

### A scope I need is not in the list

Some scopes only appear if your plan includes that feature. Tick the ones you can see and tell us which were missing.

### Can I change the scopes later?

Yes. Open the app, go to **Scopes**, change them and save. The token stays the same, so you don't need to send it again.

<sub>Last checked: 22 Oct 2026 against [HubSpot's private apps docs](https://developers.hubspot.com/docs/apps/legacy-apps/private-apps/overview) and [scopes list](https://developers.hubspot.com/docs/apps/legacy-apps/authentication/scopes).</sub>

---
Source: https://guide.upliftedconsulting.com/services/hubspot · Updated 2026-10-22