Create the credential in HubSpot
Create a private app and select the read scopes you need (typicallycrm.objects.contacts.read, crm.objects.companies.read, crm.objects.deals.read). The private app acts as its own identity in HubSpot’s audit log.
HubSpot’s own guide for creating the credential is at developers.hubspot.com.
Add the connector
Go to Organization settings > Claude Tag > Connectors, click Add, and select HubSpot. Fill in these fields in the connect form.
If the connect form offers to include the HubSpot plugin, leave that box selected; otherwise add the plugin on the Skills and plugins tab. The first credential you add for a service from the Connectors tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see where a new connector applies before you save the connector. Click Connect to save the connector.
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See how Agent Proxy works.
Verify the connection
In a channel where the connector is on, in a new thread:Related resources
- What this connection adds: the go-to-market use cases
- Give Claude access: the full credential-type and allowed-hosts reference