Skip to content

HubSpot API Key

Service Name: HubSpot

Service Description: HubSpot is a cloud-based CRM platform that provides tools for marketing, sales, content management, and customer service. It helps businesses attract visitors, convert leads, and close customers.

Service Address: https://www.hubspot.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the account level through HubSpot's security settings.

Secret Access Scope: Grants programmatic access to HubSpot's API endpoints, allowing management of contacts, companies, deals, marketing campaigns, and other HubSpot resources.

Secret Revokement URL: https://app.hubspot.com/settings/account/integrations/api-key

Secret Example: pat-na1-12345678-abcd-1234-abcd-1234567890ab

Suspicious Activity Investigation Instructions:

  • Review the HubSpot audit logs for unusual API calls or access patterns
  • Check for unexpected changes to contacts, deals, or marketing campaigns
  • Monitor for unusual data exports or mass updates to your HubSpot data
  • Verify if there are any new integrations or applications connected to your HubSpot account
  • Look for API requests from unusual IP addresses or locations

Mitigation Instructions:

  • Log in to your HubSpot account and navigate to Settings > Integrations > API

Key

  • Click "Reset" to invalidate the current API key and generate a new one
  • Update any legitimate applications with the new API key
  • Consider implementing IP restrictions for API access in your HubSpot security

settings

  • Review and revoke access for any unauthorized third-party applications
  • Enable two-factor authentication for all users with access to HubSpot
  • Audit user permissions to ensure only necessary staff have access to API keys