HubSpot scopes and what they do
When you connect a HubSpot portal to Brave Tools, you're asked to approve a set of permissions (called "scopes"). These permissions control what Brave Tools can access in your HubSpot account. This page explains what each scope does, which tool needs it, and how your data stays safe.
How security works
Brave Tools does not have independent access to your HubSpot data. When you connect your portal, you authorize Brave Tools to act on your behalf — the same way you'd authorize any HubSpot integration. This means:
- Your users control access. Only the person who connects the portal grants permissions. Brave Tools cannot connect to your portal without someone from your organization explicitly approving it.
- Permissions are scoped. Brave Tools can only access the specific data types you approve. If you don't grant "Contact lists" access, we can't read your lists — even if we wanted to.
- We don't store your HubSpot data. Brave Tools reads and writes data in real-time through the HubSpot API. We don't copy or store your CRM records, contacts, or deal information on our servers.
- You can disconnect at any time. Removing the portal connection in Brave Tools immediately revokes all access. You can also revoke access from within HubSpot under Settings → Integrations → Connected Apps.
- OAuth 2.0 standard. We use HubSpot's official OAuth 2.0 flow. Your credentials are never shared with us — authentication happens directly with HubSpot.
Required vs optional permissions
When connecting, HubSpot shows two groups of permissions:
- Required permissions are needed for core tools (HubDB Editor, File Manager). You must approve these to connect.
- Optional permissions enable additional tools (Property Pack Builder, SMS Campaigns, Content Visualizer). You can skip these during connection — the tools that need them simply won't be available until you reconnect with those permissions.
If you only use HubDB Editor, you only need the required permissions. You won't be forced to grant access to contacts, deals, or other CRM data.
Permission reference
| Permission | What it does | Used by | Required? |
|---|---|---|---|
| HubDB access | Read and write HubDB tables and rows | HubDB Editor | Yes |
| File Manager | Upload, read, and manage files in File Manager | File Manager | Yes |
| Blog & Email content | Read blog posts and marketing emails for visualization | Content Visualizer | Optional |
| Contact properties (read/write) | Read and create custom contact properties | Property Pack Builder | Optional |
| Company properties (read/write) | Read and create custom company properties | Property Pack Builder | Optional |
| Deal properties (read/write) | Read and create custom deal properties | Property Pack Builder | Optional |
| Ticket properties | Read and create custom ticket properties | Property Pack Builder | Optional |
| Contact lists (read/write) | Read contact lists to select SMS recipients | SMS Campaigns | Optional |
| Marketing events | Read marketing events for content planning | Content Visualizer | Optional |
| Marketing campaigns | Read campaign data for content planning and SMS attribution | Content Visualizer, SMS Campaigns | Optional |
What about write access?
Some permissions include "write" access (e.g. Contact properties write). This is needed because tools like Property Pack Builder create new properties in your HubSpot portal. Brave Tools does not modify existing property values, contacts, deals, or other records — it only creates the property definitions you configure.
SMS Campaigns need "Contact lists read" to know which contacts are on your selected list. It reads phone numbers to send messages, but does not modify your contact records.
How to update permissions
If you connected your portal before we added new tools (like SMS Campaigns or Property Pack Builder), your portal may be missing some optional permissions. You'll see a "Reconnect needed" badge in Brave Tools when this happens.
To update permissions:
- Go to Connections in Brave Tools
- Click Connect with HubSpot
- Select the same portal — HubSpot will show the updated permission list
- Approve the new permissions
Your existing connection and data are preserved. Reconnecting only adds the new permissions — it doesn't remove or reset anything.
Can I remove specific permissions later?
HubSpot does not support removing individual scopes from a connected app. If you want to reduce permissions, you would need to disconnect the portal entirely and reconnect it. During reconnection, HubSpot will show which permissions are required and which are optional.
Alternatively, you can revoke all access from HubSpot directly: go to Settings → Integrations → Connected Apps → Brave Tools → Uninstall.