How to connect your HubSpot portal

HubDeck connects to your HubSpot portal using a Private App token — a secure, scoped API key that gives HubDeck read-only access to your CRM data. Here's how to set one up.

Step 1: Create a Private App in HubSpot

1. Log in to your HubSpot account
2. Go to Settings (the gear icon in the top-right nav)
3. In the left sidebar, click Integrations → Private Apps
4. Click Create a private app
5. Give it a name (e.g., "HubDeck Audit") and an optional description

Step 2: Configure Scopes

Under the Scopes tab, enable the following read permissions:

• crm.objects.contacts.read
• crm.objects.companies.read
• crm.objects.deals.read
• crm.schemas.contacts.read
• crm.schemas.companies.read
• crm.schemas.deals.read

HubDeck only ever reads data — it never writes to your portal. Read permissions are sufficient for the full audit.

Step 3: Generate and Copy Your Token

Click Create app. HubSpot will generate a token starting with pat-na1- (or the appropriate region prefix). Copy this token — you'll only see it once. Store it somewhere secure, like a password manager.

Step 4: Run Your First Audit

With your token ready, run:

hubdeck audit --token pat-na1-your-token-here

Or set it as an environment variable to avoid entering it every time:

export HUBSPOT_TOKEN=pat-na1-your-token-here
hubdeck audit