š How to Generate an API Key for HubSpot API Using a Legacy App
This integration allows Gojiberry to push leads and their data into your Hubspot directly into your CRM under the relevant contact.
ā
To make this possible, HubSpot requires a Legacy App with specific permissions (called scopes).
ā
This tutorial will guide you through the process of creating that Private App and retrieving the API key (token) youāll need to connect Gojiberry to your HubSpot account ā securely and with the right level of access.
ā Why Use a Legacy App?
HubSpot no longer supports the older legacy API keys for security reasons. Legacy Apps are the new standard and provide:
Scoped access: Only the permissions your app needs.
Secure tokens: Safer than legacy API keys.
Better audit/logging: You can monitor access and usage.
š§ Step-by-Step Tutorial
1. Log into HubSpot
Go to https://app.hubspot.com
Sign in with an account that has Admin rights for the portal you're working in.
2. Navigate to the "Legacy Apps" Section
In the top-right, click on your profile icon.
Go to āAccount Settingsā.
In the left sidebar, scroll down to āIntegrationsā > āLegacy Appsā.
Click āCreate a legacy appā.
3. Configure Your Legacy App
3.1. App Name & Description
Give your app a meaningful name, like:
"My CRM Integration"
ā
Add a short description if needed. This is just for internal use.
Put "Private App":
3.2. Assign the Correct Scopes (Permissions)
For contact-related operations, you must enable the following scopes:
crm.objects.contacts.read ā to read contact data
crm.objects.contacts.write ā to create or update contact data
crm.schemas.contacts.read ā to read contact properties and metadata
crm.objects.deals.write ā to link the contact to a deal
settings.users.read ā to get and select the users of the Hubspot account
crm.objects.owners.read ā to get and select the owners of the Hubspot account
In the Scopes tab:
Click the checkbox for each of the three scopes above.
You can use the search bar to find them quickly.
4. Create the App and Get the Token
Click āCreate appā at the bottom of the screen.
Once created, youāll be shown your Access Token (this is your new API key).
Copy and store it somewhere safe ā you wonāt be able to see it again.





