HubSpot

Live

OAUTH 2.0

CRM

Contacts, deals, and campaigns all live in HubSpot. Your agent can enrich records, update deal stages, and track engagement, scoped to the user who authorized it.

  • Acts as the user: Contact, deal, and company access stays tied to the HubSpot user who authorized the agent.
  • Credentials stay vaulted: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: User permissions enforced. 90-day audit trail.
HubSpot
agent · Acme Q3
Run
Which deals closed this month and who owns them?
S
hubspot_deals_search
83ms
HubSpot agent
5 deals closed in November: Acme ($120K, Sarah), Globex ($85K, James), Initech ($72K, Maria), Umbrella ($55K, David), Stark ($48K, Lisa).
Sources: 5 deals, Nov 1 to Nov 30
hubspotmcp
5 deals
18:29
Message Claude...

Tools your HubSpot agent reaches for, scoped per user.

CALL ANY TOOL
Manage contacts, deals, companies, tickets, and engagements. Same toolkit, every framework, no auth plumbing to maintain.
hubspot_contacts_search
Search contacts
Full-text search across contacts with optional property filters and pagination.
Parameters
Name
Type
Required
Description
query
string
Optional
Search query string
filters
array
Optional
Array of filter objects with propertyName, operator, value
limit
integer
Optional
Max results (default 10)
hubspot_contact_create
Create contact
hubspot_deals_search
Search deals
hubspot_deal_create
Create deal
hubspot_companies_search
Search companies
hubspot_note_create
Create note
hubspot_task_create
Create task
Build your Agent
Drop the toolkit in, point it at the user, and your agent can search HubSpot contacts, deals, and companies from the first run.
import { ScalekitClient } from "@scalekit-sdk/node";
import { DynamicStructuredTool } from "@langchain/core/tools";
import { createReactAgent } from "@langchain/langgraph/prebuilt";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["hubspot"], toolNames: ["hubspot_contacts_search", "hubspot_deals_search", "hubspot_contact_create"] },
pageSize: 100,
});

const lcTools = tools.map((t) => new DynamicStructuredTool({
name: t.tool.definition.name,
description: t.tool.definition.description,
schema: t.tool.definition.input_schema,
func: async (args) => sk.tools.executeTool({
toolName: t.tool.definition.name, identifier: "user_123", toolInput: args,
}),
}));

const agent = createReactAgent({ llm, tools: lcTools });
import { ScalekitClient } from "@scalekit-sdk/node";
import OpenAI from "openai";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["hubspot"], toolNames: ["hubspot_contacts_search", "hubspot_deals_search", "hubspot_contact_create"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
type: "function",
function: {
name: t.tool.definition.name,
description: t.tool.definition.description,
parameters: t.tool.definition.input_schema,
},
}));

const resp = await openai.responses.create({
model: "gpt-4o", input: prompt, tools: llmTools,
});
import { ScalekitClient } from "@scalekit-sdk/node";
import Anthropic from "@anthropic-ai/sdk";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["hubspot"], toolNames: ["hubspot_contacts_search", "hubspot_deals_search", "hubspot_contact_create"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
name: t.tool.definition.name,
description: t.tool.definition.description,
input_schema: t.tool.definition.input_schema,
}));

const msg = await anthropic.messages.create({
model: "claude-sonnet-4-6", max_tokens: 1024,
tools: llmTools,
messages: [{ role: "user", content: prompt }],
});
import { Agent } from "@google/adk/agents";
import {
MCPToolset, StreamableHTTPConnectionParams,
} from "@google/adk/tools/mcp";

const toolset = new MCPToolset({
connectionParams: new StreamableHTTPConnectionParams({
url: "https://mcp.scalekit.com/hubspot",
headers: { Authorization: `Bearer ${userScopedToken}` },
}),
});

const agent = new Agent({
name: "agent", model: "gemini-2.0-flash",
tools: await toolset.getTools(),
});
Try these prompts
Paste any prompt into your agent to start pulling CRM intelligence from HubSpot.
Search & recall
Copy the prompt
Copied
Find all contacts at [company name].
Copy the prompt
Copied
Which deals are in the Proposal stage right now?
Copy the prompt
Copied
Search for [person name] in HubSpot.
Copy the prompt
Copied
List all companies in the [industry] industry.
Action & updates
Copy the prompt
Copied
Create a new contact for [name] at [company] with email [email].
Copy the prompt
Copied
Update the deal stage for [deal name] to Closed Won.
Copy the prompt
Copied
Add a note to [contact name]'s record: [note text].
Copy the prompt
Copied
Create a task: follow up with [company] by [date].
Pipeline & reporting
Copy the prompt
Copied
What deals are closing this month and who owns them?
Copy the prompt
Copied
List all contacts added in the last 7 days.
Copy the prompt
Copied
Show me all open deals over $50K.
Copy the prompt
Copied
What is the total pipeline value by owner?
SEE HOW AUTH WORKS
Users authorize HubSpot once. Their portal credentials stay vaulted, every call is checked, and every action is logged.
1
Authorize
Your user connects
HubSpot
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
A’s meetings only
2
Store
Their
HubSpot
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
HubSpot
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
HubSpot
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
See the same per-user auth pattern across Salesforce, Attio, and other CRM connectors.
GTM
HubSpot to Slack updates agent
Watch HubSpot deal stage changes and post structured updates to the right Slack channel. Reps stop checking the CRM all day.
GTM
CRM AI agent
Log calls, update opportunity stages, and surface stalled deals across HubSpot or Salesforce. No manual data entry.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
Other connector libraries treat auth as a demo afterthought. Scalekit starts with user identity, scope enforcement, and audit.
01.
Shared tokens break per-user analytics
A shared token looks fine in a demo. In production every call looks like a service account. Scalekit resolves the real user credential so attribution, audit, and scope stay accurate.
// shared token
 audit → bot_service_account
 user_filter → broken

 // scalekit
 audit → user_abc
 scope → enforced ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
HubSpot today. Others tomorrow.
Capability
DIY
Scalekit AgentKit
Token storage
Build + maintain yourself
AES-256 vault, managed
Per-user isolation
Custom credential map
Per-tenant namespace, default
Scope enforcement
Manual checks or none
Per-request, pre-API call
Token refresh
Cron job you maintain
Automatic
Audit trail
Build your own logging
90-day, SIEM-exportable
New connector
New OAuth implementation
Same pattern, one config
Multi-framework
Per-framework adapter code
8 adapters included
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""hubspot"": {
""url"": ""https://mcp.scalekit.com/hubspot"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.hubspot]
url = ""https://mcp.scalekit.com/hubspot""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""hubspot"": {
""url"": ""https://mcp.scalekit.com/hubspot"",
""type"": ""http""
}
}
}
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""hubspot"": {
""url"": ""https://mcp.scalekit.com/hubspot"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Windsurf Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""hubspot"": {
""url"": ""https://mcp.scalekit.com/hubspot"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.hubspot]
url = ""https://mcp.scalekit.com/hubspot""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""hubspot"": {
""url"": ""https://mcp.scalekit.com/hubspot"",
""type"": ""http""
}
}
}