HubSpot App Marketplace

CRM

HubSpot, Inc. · CRM & sales clouds

Best for: SaaS vendors adding a native HubSpot CRM integration for SMB and mid-market teams.

Overview

HubSpot App Marketplace lets developers connect their products to HubSpot's CRM platform. Apps use OAuth 2.0 for workspace-level authorization and can embed cards in CRM records, workflows, and the sidebar.

How to build & ship

  1. 1Create a HubSpot developer account and register a public app
  2. 2Implement the OAuth authorization-code flow and request only the scopes the app actually uses
  3. 3Build against the supported platform/API version and wire up webhooks plus the Uninstall App endpoint
  4. 4Reach the listing bar: installs in separate accounts and all declared scopes exercised recently
  5. 5Add privacy policy, terms, setup page URLs and a demo video, then submit for listing review
  6. 6Pursue certification later (sustained active installs plus a security questionnaire)

Key APIs & SDKs

OAuth 2.0 (authorization code flow)
CRM API (objects, associations, properties)
Webhooks API
CRM Cards / UI Extensions
App installs / Uninstall App API
Timeline & Engagements APIs

Authentication & security

  • Primary auth: OAuth 2.0
  • Also supports: API key
  • Security review: Required
  • Marketplace listing review includes scope justification, privacy policy, and UX checks.
  • Listing review checks OAuth, scopes, required URLs, and a demo walkthrough (roughly days-to-weeks); separate certification adds install-volume thresholds and a security questionnaire.
  • Daily and burst limits vary by API endpoint and Hub tier.

Monetization

Onboarding
$0
Commission
0% direct; paid apps use external billing
Merchant of Record
Developer is MoR for paid apps

Pros & cons for builders

Pros

  • Clean, standardized OAuth model with well-documented, modern REST APIs
  • UI extensions let apps embed natively inside the CRM record UI
  • Large SMB/mid-market base actively hunting integrations
  • Certification badge and marketplace insights aid discovery and trust

Cons

  • Install-count and scope-exercise gates delay listing until real traction exists
  • Certification requires sustained active installs, a high bar for niche apps
  • Platform/API version deprecations force ongoing maintenance to stay listed