HubSpot Service Hub is the customer support product within the HubSpot platform — it powers tickets, conversations (the shared inbox across email, chat, and messaging channels), and the knowledge base. Integrating HubSpot Service with Frontegg allows your application to read and write Service Hub data on behalf of your users through OAuth 2.0 authentication.
Prerequisites
Prerequisites
- A HubSpot account with developer access
- A HubSpot Service Hub subscription with access to tickets, conversations, and the knowledge base
Go to developers.hubspot.com and sign in with your HubSpot account.
Once signed in, you will be in your HubSpot developer account. In the left sidebar, navigate to Development → Legacy Apps. This page lists all existing applications in your account.
Click Create legacy app in the top right corner.
In the Create Legacy App dialog that appears, select Public (for apps that can be installed by any HubSpot account).
On the App Info tab, enter a name for your application in the Public app name field (for example, "Frontegg Service Integration"). This name appears in HubSpot tools when users install your app.
Click the Auth tab to open the authentication configuration page. The App credentials, Redirect URLs, and Scopes sections all live here.
Scroll down to the Redirect URLs section. Enter your Frontegg redirect URL:
https://YOUR_MCP_GATEWAY_URL/integration-callback
Scroll down to the Scopes section and click Add new scope. The scope picker dialog opens, grouped by category. Use the search field to find the Service-specific scopes quickly.
Select the following scopes:
| Scope | Description |
|---|---|
tickets | Read and write ticket records |
conversations.read | Read conversations from the shared inbox (threads, messages, inboxes) |
conversations.write | Send and update conversations from the shared inbox |
content | Read knowledge base articles |
Minimum required scopes
Minimum required scopes
For basic ticket management you need at least tickets. Add conversations.read/conversations.write to work with the shared inbox, and content to access knowledge base articles.
After selecting all required scopes, click Update. The selected scopes appear under Required scopes on the Auth page, alongside the always-required oauth scope.
Click Create app at the bottom of the page. Once the app is created, the App credentials section at the top of the Auth page displays your credentials:
- Client ID — Your app's unique identifier used to initiate OAuth.
- Client secret — Click Show to reveal the secret. Used to exchange authorization codes for access tokens.
Copy both values and store them securely.
Keep your credentials secure
Keep your credentials secure
Never share or commit your Client secret to version control.
Once you have obtained your Client ID and Client secret from the steps above, enter them in the integration configuration page of the Frontegg portal:
- Open the Frontegg portal and navigate to [ENVIRONMENT] → Connectors → HubSpot Service.
- Enter the Client ID and Client secret in the corresponding fields.
- Select the required scopes.
- Click Save.