hiddentokens

HubSpot

Available from connector 2.114.

What Claude can do

Read-only: nothing is created or changed in the CRM.

Everything the service returns is coded before it reaches Claude.

Before you start

HubSpot signs in with the token of a private app that you (or your HubSpot administrator) create once:

  1. In HubSpot: Settings → Integrations → Private Apps → Create.
  2. Under Scopes, tick read scopes only (for example crm.objects.contacts.read, crm.objects.companies.read, crm.objects.deals.read, tickets).
  3. Create the app, then copy its access token (it starts with pat-).

Set up

  1. Hidden Tokens dashboard → Connectors.
  2. On the HubSpot row, click Enable.
  3. Paste the token, then Save the token. It is stored encrypted in this computer's vault; it is shown neither to the AI nor on screen, and enters no file of the folder.
  4. Click Test. The status becomes "Ready".

Try it in Claude

Which deals changed stage this month?

Claude should use a hubspot__… tool and answer with codes. To get the real values back in a text, ask Hidden Tokens to decode it: they return to your computer, not to the chat.

Switch off the built-in connector

In Claude, Settings → Connectors and Extensions: switch off HubSpot. Otherwise the AI can go through it, in clear.

Limits

A problem? See Troubleshooting.