HubSpot API Key

Bridgecrew Policy ID: BC_GIT_49
Chekov Check ID: CKV_SECRET_49
Severity: LOW

HubSpot API Key


With the HubSpot API key, developers can create custom applications with HubSpot’s APIs. Each key is specific to a HubSpot account, not an individual user, and only one key is allowed at a time.

Fix - Buildtime


To rotate your HubSpot API key:

  • In your HubSpot account, click the settings icon in the main navigation bar.
    In the left sidebar menu, navigate to Integrations > API key.
  • Click the Actions dropdown menu, then select Rotate key.
  • Click Rotate and expire this key now. Select the reCAPTCHA checkbox. Your existing key will be deactivated and a new API key will be created.
  • Click Copy and replace the deactivated API key used by your applications with this new API key.