Skip to main content
HubSpot uses a webhook receiver (paid runtime).

​
Webhook receiver (paid runtime)

Signature: HubSpot signs payloads with X-HubSpot-Signature (HMAC-SHA256 of {client_secret}{http_body}). The receiver validates the HMAC against the per-tenant client secret.

​
Setup

  1. In HubSpot, go to Settings > Integrations > Private Apps (or create a public app for OAuth).
  2. Create a private app with scopes: crm.objects.contacts.read, crm.objects.deals.read, crm.objects.companies.read, timeline.
  3. In the app’s Webhooks settings, add a webhook subscription for https://runtime.myceliumai.co/webhooks/hubspot/{your_tenant_id}.
  4. Subscribe to events: Contact Created, Deal Stage Changed, Company Created, Timeline Event Created.
  5. Add to the runtime env:
    • HUBSPOT_CLIENT_SECRET_{TENANT_ID} (for signature validation)
    • HUBSPOT_APP_ID_{TENANT_ID}

​
Events ingested

​
Retry behavior

Failed deliveries land in the per-tenant dead-letter folder. Replay via: