## HubSpot Service integration

HubSpot Service Hub is the customer support product within the HubSpot platform — it powers tickets, conversations (the shared inbox across email, chat, and messaging channels), and the knowledge base. Integrating HubSpot Service with Frontegg allows your application to read and write Service Hub data on behalf of your users through OAuth 2.0 authentication.

Prerequisites
- A HubSpot account with developer access
- A HubSpot Service Hub subscription with access to tickets, conversations, and the knowledge base


### Connect HubSpot Service

#### Step 1: Open the developer portal

Go to [developers.hubspot.com](https://developers.hubspot.com/) and sign in with your HubSpot account.

![HubSpot developer portal homepage](/assets/hubspot-service-1.df2c279103f8d1967984cc9a3d64064076b3b45d56321cbe15e5923426f2b081.1ce25488.png)

#### Step 2: Go to Legacy Apps

Once signed in, you will be in your HubSpot developer account. In the left sidebar, navigate to **Development** → **Legacy Apps**. This page lists all existing applications in your account.

Click **Create legacy app** in the top right corner.

![HubSpot Legacy Apps list](/assets/hubspot-service-2.498d83a354726bdf9f4f3da136c9b8a3c338d5caa58c7c477aea06bb9d19657a.1ce25488.png)

#### Step 3: Choose Public app type

In the **Create Legacy App** dialog that appears, select **Public** (for apps that can be installed by any HubSpot account).

![HubSpot Create Legacy App dialog](/assets/hubspot-service-3.43faf4eedf182a7daf49f00f540f68e8486ab34dfbb5b838b9267cfc175cc5fd.1ce25488.png)

#### Step 4: Fill in the app name

On the **App Info** tab, enter a name for your application in the **Public app name** field (for example, "Frontegg Service Integration"). This name appears in HubSpot tools when users install your app.

![HubSpot app name form](/assets/hubspot-service-4.c820bf278806ab1f8fd36436ec57946f1e2a910494fa76c161ca73d087c4339c.1ce25488.png)

#### Step 5: Open auth settings

Click the **Auth** tab to open the authentication configuration page. The **App credentials**, **Redirect URLs**, and **Scopes** sections all live here.

![HubSpot Auth settings tab](/assets/hubspot-service-5.824207b43781e48226b8884c286c9fa1d7cf28fd2f6134377f547ee74ab49058.1ce25488.png)

#### Step 6: Add the redirect URL

Scroll down to the **Redirect URLs** section. Enter your Frontegg redirect URL:


```
https://YOUR_MCP_GATEWAY_URL/integration-callback
```

![HubSpot redirect URL configuration](/assets/hubspot-service-6.b0cacb7c4352effea457de3c2ff6dad7dc00bbcf6e71faf81aad6378dfcb2918.1ce25488.png)

#### Step 7: Open the scope picker

Scroll down to the **Scopes** section and click **Add new scope**. The scope picker dialog opens, grouped by category. Use the search field to find the Service-specific scopes quickly.

![HubSpot scope picker](/assets/hubspot-service-7.a15a20f563a9079890b365c62368fae75c9f5226eedad41c0ee0ba9434cc58ef.1ce25488.png)

#### Step 8: Select the Service scopes

Select the following scopes:

| Scope | Description |
|  --- | --- |
| `tickets` | Read and write ticket records |
| `conversations.read` | Read conversations from the shared inbox (threads, messages, inboxes) |
| `conversations.write` | Send and update conversations from the shared inbox |
| `content` | Read knowledge base articles |


Minimum required scopes
For basic ticket management you need at least `tickets`. Add `conversations.read`/`conversations.write` to work with the shared inbox, and `content` to access knowledge base articles.

After selecting all required scopes, click **Update**. The selected scopes appear under **Required scopes** on the Auth page, alongside the always-required `oauth` scope.

![HubSpot scopes selected](/assets/hubspot-service-8.33306810aa2e39c60283d011a43f58eb6b978df521f513cdc417e24b49bb653c.1ce25488.png)

#### Step 9: Create the app and copy your credentials

Click **Create app** at the bottom of the page. Once the app is created, the **App credentials** section at the top of the Auth page displays your credentials:

- **Client ID** — Your app's unique identifier used to initiate OAuth.
- **Client secret** — Click **Show** to reveal the secret. Used to exchange authorization codes for access tokens.


Copy both values and store them securely.

Keep your credentials secure
Never share or commit your Client secret to version control.

![HubSpot app credentials page](/assets/hubspot-service-9.da8e485f8e4c68d4a94ece2a73f61f9d3da5d5339c929a02863c82c42daafd09.1ce25488.png)

### Configure the Frontegg portal

Once you have obtained your **Client ID** and **Client secret** from the steps above, enter them in the integration configuration page of the Frontegg portal:

1. Open the **Frontegg portal** and navigate to [ENVIRONMENT] → Connectors → HubSpot Service.
2. Enter the **Client ID** and **Client secret** in the corresponding fields.
3. Select the required **scopes**.
4. Click **Save**.


### Additional resources

- [HubSpot Tickets API](https://developers.hubspot.com/docs/guides/api/crm/objects/tickets)
- [HubSpot Conversations API](https://developers.hubspot.com/docs/guides/api/conversations/overview)
- [HubSpot Knowledge Base API](https://developers.hubspot.com/docs/guides/api/cms/knowledge-base)
- [HubSpot OAuth guide](https://developers.hubspot.com/docs/api/working-with-oauth)
- [HubSpot developers home](https://developers.hubspot.com/)
- [How to get your Redirect URL](/agen-for-work/connectors/redirect-url)