{"registry_version":"2026.1025.387","generated_at":"2026-10-25T06:27:00Z","content_sha256":"089d16f627d9365e3d0663cc8069203706d7cb23a76c332226e29686968811a5","signed":true,"signature":{"key_id":"ed25519:74ca19268e364242","algorithm":"ed25519","expires_at":"2026-11-24T06:27:09Z","expired":false,"manifest":"/registry/manifest.json"},"entry_sha256":"58ceab0c74f6a280521b5c70b293d3683eebcb03127684fc8dda0c7353aa0b01","entry":{"id":"hubspot/app","name":"HubSpot app (developer platform, legacy private app, Marketplace listing)","vendor":"HubSpot","summary":"Build an app on HubSpot's developer platform with the HubSpot CLI (static auth for one account, OAuth for many), or use a legacy private app token; a Marketplace listing needs OAuth only, three active installs and HubSpot's quality review.","category":"commerce","group":"C","homepage":"https://developers.hubspot.com","docs":["https://developers.hubspot.com/docs/apps/developer-platform/build-apps/overview","https://developers.hubspot.com/docs/apps/developer-platform/build-apps/app-configuration","https://developers.hubspot.com/docs/apps/legacy-apps/private-apps/overview"],"status":"researched","last_verified":null,"last_researched":"2026-10-25","sources":[{"id":"platform","url":"https://developers.hubspot.com/docs/apps/developer-platform/build-apps/overview","title":"Developer platform","accessed":"2026-10-25","supports":"Apps are created and deployed with the HubSpot CLI (hs project create / hs get-started); configuration uploaded to a project in a developer account; test installs in a developer test account.","kind":"official"},{"id":"app_config","url":"https://developers.hubspot.com/docs/apps/developer-platform/build-apps/app-configuration","title":"App configuration","accessed":"2026-10-25","supports":"Distribution marketplace (requires oauth) or private (allowlisted accounts or single account); auth oauth or static (one account, required scopes only).","kind":"official"},{"id":"private_apps","url":"https://developers.hubspot.com/docs/apps/legacy-apps/private-apps/overview","title":"Legacy private apps","accessed":"2026-10-25","supports":"Legacy apps still supported; super admin required; Development > Legacy apps > Create legacy app > Private; token on Auth tab; rotate now or with 7-day window; HubSpot recommends rotating every six months; removing the creating user can break calls.","kind":"official"},{"id":"listing_reqs","url":"https://developers.hubspot.com/docs/apps/developer-platform/list-apps/listing-your-app/app-marketplace-listing-requirements","title":"App listing requirements in the HubSpot Marketplace","accessed":"2026-10-25","supports":"At least three active unique unaffiliated production installs with activity in the past 30 days; OAuth as sole auth method; minimal scopes; initial review within 10 business days; full process no more than 60 days from feedback; one submission at a time.","kind":"official"}],"allowed_domains":["app.hubspot.com"],"account_model":{"summary":"Apps live in a HubSpot developer account (projects) or, for legacy private apps, in the customer's HubSpot account.","accounts":[{"name":"HubSpot developer account","kind":"developer","required":false,"note":"For developer-platform apps and Marketplace listings; test in a developer test account."},{"name":"HubSpot account (customer portal)","kind":"organisation","required":true,"note":"Super admin needed for legacy private apps."}]},"prerequisites":[{"need":"Node.js and the HubSpot CLI for developer-platform apps"}],"steps":[{"id":"private_app","title":"Legacy private app token (single account, quickest)","summary":"As a super admin go to Development > Legacy apps > Create legacy app > Private; set name, scopes and optional webhooks; Create app; Show token on the Auth tab.","route":"copilot","depends_on":[],"gate":"human_submit","url":"https://app.hubspot.com/","recovery":[{"hiccup":"Calls fail with USER_DOES_NOT_HAVE_PERMISSIONS","fix":"The user who created the app was removed; rotate the token or re-add the user.","source":"private_apps"}],"capture":{"env":"HUBSPOT_ACCESS_TOKEN","kind":"token"},"optional":true,"sources":["private_apps"]},{"id":"cli_project","title":"Create a developer-platform app with the CLI","summary":"Run hs project create (or hs get-started), choose distribution (private or marketplace) and auth (static or oauth) in app-hsmeta.json, upload to your developer account and test-install in a developer test account.","route":"guided","depends_on":[],"gate":"none","optional":true,"sources":["platform","app_config"]},{"id":"oauth_credentials","title":"Copy OAuth client ID and secret","summary":"For oauth apps, copy the client ID and secret from the app's auth settings in the developer account [to verify location].","route":"copilot","depends_on":["cli_project"],"gate":"none","url":"https://app.hubspot.com/","capture":{"env":"HUBSPOT_CLIENT_SECRET","kind":"secret"},"optional":true},{"id":"marketplace_listing","title":"Submit a Marketplace listing","summary":"Needs OAuth-only auth, minimal used scopes, and at least three active unaffiliated installs in the past 30 days; submit one app at a time.","route":"guided","depends_on":["oauth_credentials"],"gate":"third_party_review","lead_time":{"official":{"text":"Initial review within 10 business days; full review and feedback process no more than 60 days from when feedback is shared.","source":"listing_reqs"}},"optional":true}],"outputs":[{"name":"HUBSPOT_ACCESS_TOKEN","description":"Legacy private app (or static auth) access token","secret":true,"example_format":"opaque token string","from_step":"private_app"},{"name":"HUBSPOT_CLIENT_ID","description":"OAuth app client ID","secret":false,"example_format":"opaque string","from_step":"oauth_credentials"},{"name":"HUBSPOT_CLIENT_SECRET","description":"OAuth app client secret","secret":true,"example_format":"opaque string","from_step":"oauth_credentials"}],"terms_notes":[{"kind":"rules_say","severity":"amber","text":"Marketplace apps must use OAuth as the sole authorization method and already have three active unaffiliated installs.","source":"listing_reqs"},{"kind":"rules_say","severity":"yellow","text":"Submitting a second app while one is in review gets it automatically rejected.","source":"listing_reqs"}],"renewals":[{"what":"Rotate private app access token (HubSpot recommendation)","every":"6 months","every_days":180,"source":"private_apps"}],"stripe_projects":false,"api_provisioning":{"available":"partial","notes":"Developer-platform apps are defined as code and deployed with the HubSpot CLI; legacy private apps are UI-only.","source":"platform"}}}