HubSpot Integration — How to provide Private App API Key & Object IDs
This guide explains how a client can generate a secure API token (via HubSpot’s Private Apps), locate the necessary Event ID or Object ID (depending on the integration), and securely share those values with our team.
Before you start (prerequisites)
You must have Admin access to the HubSpot account (or permission to create Private Apps).
Identify which object or event type you want integrated (e.g., Meetings link ID, Custom Object ID, Pipeline/Deal ID).
Be ready to share the values securely (see secure sharing section).
Part A — Create a Private App API key (token)
HubSpot replaced legacy API keys with Private Apps. Tokens from Private Apps are used for integrations.
Log in to your HubSpot account at https://app.hubspot.com.
In the top right corner, click your account name, then go to Settings.
In the left sidebar, scroll down and click Integrations > Private Apps.
Click Create a private app.
Give the app a name (e.g.,
Aurora Integration - <Your Company>).(Optional) Add a description like
Integration with Aurora platform.Go to the Scopes tab and grant the appropriate permissions:
Common scopes:
crm.objects.contacts.read/write,crm.objects.deals.read/write,crm.schemas.contacts.read,crm.objects.meetings.read— depends on the integration needs.If you’re unsure, grant read access to contacts, meetings, and deals. We’ll confirm if more scopes are required.
Click Create app.
Copy the generated Access Token. This token is shown only once — store it in a password manager.
Record: Copy the Private App access token. You will provide this to our team.
Part B — Locate the Event ID or Object ID
Depending on what’s being integrated, you may need to provide an ID for a HubSpot object.
1. For Meetings (scheduling links)
Go to Sales > Meetings.
Click the meeting link you want to integrate.
The URL contains the meeting link ID. Example:
https://app.hubspot.com/meetings/<user-id>/<meeting-id>Copy the
<meeting-id>.
2. For Deals
Open the deal record in HubSpot.
The URL looks like:
https://app.hubspot.com/contacts/<portal-id>/deal/<deal-id>Copy the
<deal-id>.
3. For Contacts or Custom Objects
Open the record in HubSpot.
The URL shows the object ID. Example:
https://app.hubspot.com/contacts/<portal-id>/record/<object-type>/<object-id>Copy the
<object-id>.
If you’re unsure which ID we need, provide the full record URL and we’ll extract the ID for you.
Part C — Share securely
Preferred secure methods:
Secure password manager share (1Password/LastPass/Bitwarden).
Encrypted file share (e.g., ZIP with password shared separately).
If using email (least secure):
Place values in a password-protected file and send password separately.
What to send:
HubSpot account domain (Portal ID):
<your portal ID>Private App Token:
<paste-token-here>Event/Object ID:
<paste-id-here>Integration context: e.g., “Meetings scheduling link” or “Deals pipeline.”
Example secure message:
HubSpot portal ID: 1234567
Private App Token: pat-XXXXXXXXXXXX
Object ID: 987654321
Integration context: Meeting link for new customer onboarding
Part D — What we’ll do with it
Store the token securely and configure our system to connect with your HubSpot account.
Validate access by retrieving sample data (e.g., test meeting or contact).
Run a test integration flow and confirm successful API calls.
Notify you once the integration is fully active.
Security best practices
Never share tokens over plain email or chat.
Rotate/revoke tokens if you believe they’ve been exposed.
Limit scopes to only what’s required.
Use a descriptive name for the private app so you can easily identify it later.
FAQ
