Skip to content

By integration

In HubSpot: creating the private app and its permissions

Requirements: a HubSpot account with permission to create private apps (section 2).

  1. Log into your HubSpot account and go to Settings → Integrations → Private Apps.
  2. Press Create a private app. Give it a recognizable name — for example your own business’s name, never a generic one like “test”.
  3. Go to the Scopes tab and check these five permissions — the minimum the connector needs, not one more:
ScopeWhat the connector uses it for
crm.objects.contacts.readSearch and read existing contacts.
crm.objects.contacts.writeCreate or update a contact (“lead → contact” action, section 5).
crm.objects.deals.readSearch existing deals.
crm.objects.deals.writeCreate a deal or change its stage (“stage → deal” action, section 5).
crm.objects.owners.readRead the owners (HubSpot users) of a contact or deal.
  1. Save the app. HubSpot shows the access token, in the pat-eu1-… format — copy it before closing the window: for security, HubSpot only shows it in full this first time (afterwards you can reveal it again from the app’s own Auth tab if you need it again).

Warning — Verified against the official documentation — a name that may vary

The path Settings → Integrations → Private Apps above is the one this guide uses because it’s the one Platform’s own connection form describes. When reviewing HubSpot’s official documentation for this manual (developers.hubspot.com/docs/api/private-apps and developers.hubspot.com/docs/guides/apps/private-apps/overview, consulted on September 5, 2026), HubSpot today calls this same mechanism “Legacy private apps” and places it under the Development → Legacy apps → Create legacy app → Private menu of its developer portal. HubSpot keeps the mechanism working — a private app token still works the same — but it may have renamed or moved the menu in your account depending on when it was created. If you don’t find “Private Apps” where step 1 says, look for “Legacy apps” instead; this note will be removed once the capture session confirms the exact path a new admin sees today.