HubSpot Developer Supportの新しい掲示板トピック

Files API v3 search endpoint returns empty results - started Jan 23, 2026

JCarey5 — Fri, 23 Jan 2026 13:37:55 GMT

Is anyone else experiencing issues with the Files API search endpoint today? Starting this morning, the /files/v3/files/search endpoint returns empty results ({"results":[]}) for ALL queries, despite files existing in the account. What's broken:

GET /files/v3/files/search?parentFolderId={id} → Returns 0 results

GET /files/v3/files/search?limit=10 (no filters) → Returns 0 results

GET /files/v3/folders/search?parentFolderId={id} → Returns 0 results

What still works:

GET /files/v3/folders/{path} → Returns folder correctly

GET /files/v3/files/stat/{path} → Returns file correctly

Steps to reproduce:

Have files in a folder (confirmed visible in HubSpot UI)

Call /files/v3/files/search with parentFolderId parameter

API returns {"results":[]} despite files existing

What I've tried:

Rotated API token - issue persists

Confirmed files scope is enabled

Tested multiple folders - all return empty

Tested different filter parameters (type, access, archived) - all return empty

Workaround found: Direct file access via /files/v3/files/stat/{path} still works if you know the exact file path. Has anyone else noticed this? Is there a known issue with the Files search API?

Creating Quote templates with HubL

birdman — Fri, 23 Jan 2026 12:15:11 GMT

Current customization options are quite limited for Quotations (CPQ) in CommerceHub. When will HubL capabilities become available?

Hide default language selector (Elevate theme)

JensD — Fri, 23 Jan 2026 10:35:46 GMT

Hi all,

I would like to hide or edit the default language selector that is used by the Elevate theme.

In English it looks okay, but when I switch to another language, it kinda ruins the header and makes my menu go on 2 lines instead of 1.

I've not found a way to hide or edit this.

(Have to blur/blank out branding atm)

Conversations SDK : Handling Overlay Issues and Language Configuration Without Path Change

FireHot — Fri, 23 Jan 2026 09:07:03 GMT

Hello HubSpot Developer Community,

I'm currently integrating the Conversations SDK into an H5 (mobile web) page and have encountered two challenges that I'd like to seek guidance on:

Overlay Blocking Issue with Buttons
When the Conversations chat bubble is displayed, the transparent portion of the iframe appears to block interactive elements (e.g., buttons) underneath it on the page. This behavior prevents users from clicking those buttons while the chat is open. Is there a recommended way to resolve this issue? For example:
- Can we adjust the z-index or CSS properties of the iframe or overlay?
- Are there any configuration options in the SDK to make the iframe non-blocking?
- Any known workarounds or best practices for handling this on mobile H5 pages?
Changing SDK Language Without URL Path Modification
Currently, our application's path does not support language parameters for loading the Conversations SDK. We need to set the language through JavaScript configuration rather than URL paths. Is there a way to dynamically set the language of the Conversations SDK without relying on the URL path? For instance:
- Can we pass a language parameter via JavaScript configuration?
- Does the SDK support setting locale through a config object or API call?

Any insights, code examples, or documentation references would be greatly appreciated!

Thank you in advance for your help.

Best regards.

Dynamic Marketing Email ID

DWild30 — Thu, 22 Jan 2026 21:12:06 GMT

I am currently sending marketing email information through a webhook, and I am receiving the subject line, the To, and the From. I am trying to send the content of the email, but have been unable to do so. Since I can not send the content, I want to send the Web version URL for the email, and have been told to use
GET - /marketing/v3/emails/{emailId}

I am writing to see if there is a way to make the {emailID} dynamic and pull the marketing email ID of the email sent to a contact, rather than having a single line of code for each email that I create. I have had no luck with this but would love to be able to send the URL back to my system so I can easily view what email has been sent.

Cross-origin frame access errors in browser console from conversations-embed.js

MrL — Thu, 22 Jan 2026 19:20:52 GMT

Subject: Cross-origin frame access errors in browser console from conversations-embed.js

Product: HubSpot Chat Widget / Conversations

Severity: Low (cosmetic/console noise, functionality not affected)

Environment:
- Website: <redacted>
- Browser: Safari (also reproducible in Chrome/Firefox)
- HubSpot tracking code version: Current (as of January 2026)

Description:

The HubSpot chat widget and tracking scripts generate repeated cross-origin security errors in the browser console on every page load. While the widget appears to function correctly, these errors create console noise that makes debugging other issues difficult and may concern security-conscious users or developers.

Console Errors:

[Error] Blocked a frame with origin "<redacted>" from accessing a frame with origin "https://app.hubspot.com". Protocols, domains, and ports must match.
handleWindowResize (conversations-embed.js:1:17026)

[Error] Blocked a frame with origin "<redacted>" from accessing a frame with origin "https://app.hubspot.com". Protocols, domains, and ports must match.
handleStoreMessagesCookie (conversations-embed.js:1:16275)
handleMessage (conversations-embed.js:1:28361)

[Error] Blocked a frame with origin "<redacted>" from accessing a frame with origin "https://app.hubspot.com". Protocols, domains, and ports must match.
handleIframeLoad (conversations-embed.js:1:13941)

Additional Warning:

[Warning] [quick-fetch] quickFetchScript was not included or running in Node.js environment. Falling back to stubbed implementation. (visitor.js, line 1)

Steps to Reproduce:

1. Add HubSpot tracking code to any website
2. Enable the HubSpot chat widget
3. Load any page on the website
4. Open browser Developer Tools -> Console
5. Observe the cross-origin frame access errors

Root Cause Analysis:

The errors originate from these functions in conversations-embed.js:
- handleWindowResize (line 17026)
- handleStoreMessagesCookie (line 16275)
- handleIframeLoad (line 13941)

These functions appear to be attempting direct DOM access to the parent frame from within the HubSpot iframe, which violates the browser's Same-Origin Policy. This is blocked regardless of Content-Security-Policy settings because CSP controls resource loading, not cross-origin JavaScript access.

Expected Behavior:

HubSpot scripts should use postMessage() API exclusively for all cross-origin communication and should include proper error handling with try/catch blocks to prevent console errors when direct frame access is (correctly) blocked by the browser.

Suggested Fix:

1. Wrap cross-origin frame access attempts in try/catch blocks
2. Use feature detection before attempting direct frame access
3. Rely solely on postMessage() for cross-origin communication

Example pattern:

// Instead of:
parent.document.something; // Throws error

// Use:
try {
// Attempt if same-origin (will fail silently if cross-origin)
if (window.parent !== window) {
parent.postMessage({ type: 'resize', data: ... }, '*');
}
} catch (e) {
// Already using postMessage fallback, no error logged
}

Impact:

- Console pollution on every page load
- Difficulty debugging legitimate website issues
- May trigger alerts in security monitoring tools
- Poor developer experience

Workaround:

None available on the customer side. This requires a fix in HubSpot's JavaScript code.

---------------------------------------------------------------------

Report prepared: January 22, 2026

Membership software?

DYoonZacharias — Thu, 22 Jan 2026 18:40:26 GMT

Hello all --

Apologies this isn't the right forum/discussion group, but I'm curious if anyone has any recommendations for membership software (medium-sized non-profit) that works well with HubSpot?

Thanks!

Webhook on quotes deployment fail

LDekester — Thu, 22 Jan 2026 17:48:06 GMT

Hi,

I am trying to set up a new app with a webhook on quotes with these configuration:
app-hsmeta.json:

{

"uid": "myApp_app",

"type": "app",

"config": {

"description": "My custom app",

"name": "myApp-Application",

"distribution": "private",

"auth": {

"type": "static",

"requiredScopes": [

"oauth",

"crm.objects.companies.read",

"crm.objects.deals.read",

"crm.objects.quotes.read",

"crm.objects.line_items.read"

"optionalScopes": [],

"conditionallyRequiredScopes": []

"permittedUrls": {

"fetch": [

"https://api.hubapi.com"

"iframe": [],

"img": []

}

and webhooks-hsmeta.json:

{

"uid": "myApp_webhooks",

"type": "webhooks",

"config": {

"settings": {

"targetUrl": "my-url",

"maxConcurrentRequests": 10

"subscriptions": {

"crmObjects": [

{

"subscriptionType": "object.propertyChange",

"objectType": "quote",

"propertyName": "hs_sign_status",

"active": false

}

]

}

When I use the command "hs project update" the build works but the deployment of the webhook fails with this error:
[ERROR] An internal error occurred while upserting webhooks settings. Try again later. If the problem persists, contact HubSpot support.

Any ideas on why I am getting this error?

Remote MCP Server – Notes Access & Auth Compatibility

Adam_Moroney — Thu, 22 Jan 2026 10:27:11 GMT

Hi HubSpot team,

We’re currently integrating with the Remote MCP Server via an AI Agent and had two quick questions:

Notes support
Is there any roadmap or planned enhancement to support native “get notes” access via MCP (e.g. notes associated with contacts/companies)?
We can work around this today using the API, but MCP support would be valuable for our use case.
Authentication / Copilot Studio
Our agent is built in Microsoft Copilot Studio, which currently only supports OAuth 2.0 connectors.
Is there any recommended way to use MCP in OAuth-only environments without introducing a proxy layer, or should we expect to continue using the OAuth 2.0 HubSpot API in this case?

Just trying to understand what’s coming next and how best to align.

Kind Regards,
Adam

Label Associations: POST /crm/v4/associations/{from}/{to}/labels returns 500

EdoardoP — Thu, 22 Jan 2026 08:22:23 GMT

Hey everyone,

I am trying to create custom association labels between a custom object and the Lead object via the v4 API, and I keep getting a 500 internal error.

Here's what I'm doing:

POST https://api.hubapi.com/crm/v4/associations/2-197105422/lead/labels

Body:

{
  "name": "manual_lead_to_edition",
  "label": "Manual",
  "inverseLabel": "Manual"
}

Response:

{
  "status": "error",
  "message": "internal error",
  "correlationId": "b89fd04f-15e4-4cb2-a4c8-efec04f8078d"
}

I've checked the docs (https://developers.hubspot.com/docs/api-reference/crm-associations-schema-v4/definitions/post-crm-associations-v4-fromObjectType-toObjectType-labels) and my request matches exactly what's expected. Required fields are there, JSON is valid, token works fine on every other endpoint.

What I've already tried:
- Different label names
- Removing inverseLabel entirely
- Using the fully qualified object name instead of the object type ID
- Verified the token works (other API calls are fine)
- GET on the same endpoint returns an empty results array, so the path is valid

Creating default associations (without labels) works perfectly. It's only when I try to create a labeled association that it blows up.

My gut says this might be a Lead object thing? Lead is still relatively new and maybe the v4 associations schema doesn't fully support it yet? Or is there some undocumented requirement I'm missing?

I have already submitted a feedback to HubSpot but figured I'd check here too in case someone has run into this or knows a workaround.

Thanks for any pointers.

Complex Rendering, Tracking, and SEO Synchronization Issues on a HubSpot-Integrated Culver Menu Webs

BStokes2 — Wed, 21 Jan 2026 22:32:45 GMT

I am currently dealing with a multifaceted technical problem on my Culver menu website, which is deeply integrated with HubSpot for analytics, CRM tracking, and content management. The website’s primary purpose is to display a complete Culver-style menu with multiple categories such as burgers, sides, drinks, and desserts, along with rich content like images, descriptions, prices, and availability indicators. While the site appears visually correct in many situations, I am seeing inconsistent behavior across users, devices, and traffic sources, which leads me to believe there may be conflicts between HubSpot scripts, caching, and how the menu content is being rendered and tracked.

One of the most noticeable issues is that menu content sometimes loads incompletely or out of order, especially on first page load or when users arrive from HubSpot-tracked campaigns. Entire menu sections may be missing, images may not render, or interactive elements like category filters fail to respond. Refreshing the page often fixes the issue temporarily, which suggests a timing or script-execution problem. Because HubSpot tracking code, chat widgets, and forms are loaded alongside the menu scripts, I suspect that asynchronous loading or script priority may be interfering with how the menu initializes.

Another major concern is inconsistent data and analytics reporting in HubSpot. Page views, scroll depth, and click events related to the Culver menu do not always fire correctly, even though users are clearly interacting with the site. In some cases, sessions appear in HubSpot with unusually low engagement, which does not match actual user behavior observed through other tools. This makes it difficult to trust the data when optimizing content, campaigns, or user experience, and raises questions about whether certain menu elements are being blocked or skipped by tracking scripts.

From a technical standpoint, the website uses dynamic JavaScript rendering to load menu data from structured sources, while HubSpot scripts are injected globally through the header. I am concerned that race conditions may occur when both systems attempt to access or manipulate the DOM at the same time. Additionally, cookie consent banners, GDPR compliance tools, and HubSpot’s own tracking restrictions may be delaying or preventing certain scripts from executing properly, especially for users in different regions.

I am also noticing SEO-related inconsistencies that may be connected to this setup. Some Culver menu pages appear indexed with incomplete content, and HubSpot-generated metadata or canonical tags sometimes override or conflict with custom settings. This raises the possibility that search engines are seeing a different version of the page than users, particularly if menu content is loaded after initial page render or if HubSpot scripts alter the page structure dynamically.

I would greatly appreciate advice from the HubSpot community on how to best integrate dynamic, menu-driven websites with HubSpot tools without causing rendering, tracking, or SEO issues. Have others experienced similar conflicts between HubSpot scripts and custom JavaScript content? Any best practices for script loading order, consent management, tracking configuration, or debugging steps within HubSpot would be extremely helpful in stabilizing the Culver menu website and ensuring accurate data and consistent user experience. sorry for long post

Refresh token with HubSpot MCP Server (Beta)

keurcien — Wed, 21 Jan 2026 22:11:47 GMT

Hi,

I was very happy to see the Remote MCP in my HubSpot account, and found that it was easy to set up. I'm building a custom MCP client (using the official Python SDK).

From https://mcp.hubspot.com/.well-known/oauth-authorization-server, the token endpoint is:

https://mcp.hubspot.com/oauth/v3/token

When requesting an access token with my MCP app client info, it works. And I keep the refresh token that was provided along with the access token.

But when I try to silently refresh the token, to avoid human interaction, requesting a new access token using the refresh token, it raises this error:

HTTP Error: 400 Client Error: Bad Request for url: https://mcp.hubspot.com/oauth/v3/token
Response Text: {"status":"BAD_REFRESH_TOKEN","message":"missing or invalid refresh token","correlationId":"..."}

So I checked the token validity using the introspect endpoint and it tells me it's valid.

Then I tried to refresh the token, hitting two other endpoints, which worked:
https://api.hubapi.com/oauth/v1/token and https://mcp.hubspot.com/oauth/v3/token

It'd be nice to be able to use the same endpoint and rely on the server metadata endpoints.

Transactional Email API: sending physical attachments (MIME) instead of hosted links

MGT2 — Wed, 21 Jan 2026 20:42:24 GMT

Hello community,

I am currently working with the Transactional Email API (Single Send v3) and referencing this documentation: https://developers.hubspot.com/docs/api-reference/marketing-transactional-single-send-v3/guide.

My business requirement strictly demands sending physical attachments (e.g., a PDF invoice attached to the email header) rather than a downloadable link hosted on HubSpot.

My Questions:

Is it possible to send a base64 encoded file or a stream as an actual attachment using the Single Send v3 API combined with a HubSpot Design Manager template?
If not, is the HubSpot SMTP API the only native way to achieve this by constructing the raw MIME message myself?
Has anyone successfully implemented this workflow without using third-party providers (like SendGrid or AWS SES) triggered via Webhooks?

Any guidance or code snippets would be greatly appreciated.

Thanks!

HubSpot Public App Uninstall flow and OAuth Best Practices

princesuhagiya1 — Wed, 21 Jan 2026 08:36:19 GMT

Hi, I have built a calling integration app. Everything is working fine, but I am stuck with the uninstall flow. When a user uninstalls the app from HubSpot (Settings → Integrations → Connected Apps → Uninstall), how can I remove the related database entries from my MongoDB? In my database, I store the installed app data such as portal ID, user ID, access token, and refresh token. How does the uninstall flow work? Please suggest the correct approach and best practices. Also, please suggest best practices for storing OAuth access tokens and refresh tokens, handling token refresh, and app verification/validation.

Are custom modules for email templates still possible?

SHubbell — Tue, 20 Jan 2026 21:21:00 GMT

Hello! I am attempting to create a custom module for emails, and under the option "Select the types of content you can add this module to:" emails are not an option. According to the documentation I am seeing, that should be listed.

Am I looking at the wrong thing, or is this no longer an option? Many thanks!

Public Beta: Self-Service MCP Auth Apps for the HubSpot Remote MCP Server

dennisedson — Tue, 20 Jan 2026 14:27:02 GMT

Ecosystem partners and customers can now build and manage their own AI connectors to the (Beta) HubSpot Remote MCP (Model Context Protocol) Server through a streamlined self-service interface. This public beta builds on the initial release of the HubSpot Remote MCP Server and simplifies the experience of creating and managing AI connectors directly.

What’s Changing?

A new MCP Auth Apps UI has been added to the HubSpot Developer Platform to allow ecosystem partners and customers to build and manage their own AI connectors to the HubSpot Remote MCP Server through a streamlined and fully self-service experience.

An earlier public beta, released on September 1, 2025, introduced the HubSpot Remote MCP Server available across all hubs and tiers. However, connector creation and management still relied on other platform developer tools intended for apps providing more functionality in HubSpot.

With this update, partners and customers can independently manage the full connector lifecycle using the new UI, including:

A dedicated MCP Auth Apps section in the HubSpot Developer Platform
Creating new MCP connectors through a self-service interface
Modifying and maintaining connector settings through the UI
Securely access their OAuth 2.1 credentials for integrating external systems with the HubSpot Remote MCP Server

End-user installation permissions for these apps are now managed automatically, giving customers full control over what HubSpot data they share via the MCP server connection without requiring partners to manually configure or manage permissions.

For implementation details, see the developer documentation.

When is it happening?

The initial public beta for the HubSpot Remote MCP Server went live on September 1, 2025.
A new public beta for self-service connector creation and management using the MCP Auth Apps UI for ecosystem partners and customers went live on January 13, 2026.

Different email are being linked to same contact

ABeniwal — Tue, 20 Jan 2026 13:32:59 GMT

Hi team
If you are working in hubspot, can you help me understand the rootcause of 2 different email were linked to same HS contact of my organisation.
Here is the contact link. the user was register on HS in dec 2024 through a marking form. In Dec 2025 the user with different email filled the form. but somehow it was linked to same hs contact, please help me find the RCA.

JetFormBuilder - HubSpot Integration

APowell72 — Tue, 20 Jan 2026 12:18:01 GMT

Hello,

I need assistance with JetFormBuilder and Hubspot integration. I've followed the steps and I still require "Install OAuth URL" which the created app doesn't provide.

Failed to load third-party app settings in Firefox

PR74 — Tue, 20 Jan 2026 11:54:13 GMT

I go to my Connected Apps > My third-party (unverified) app page > Settings

In Firefox, this page is stuck on HubSpot loading animation.

In Chrome it works.

Looking in the console, I notice that the remote.js script failed to load:

Loading failed for the <script> with source “https://static-eu1.hubspot-extensions.com/ui-extension/v1/remote.js”.

Is it possible to retrieve associated contact properties from a HubSpot Deal using a single API call

niazkikhan9988 — Tue, 20 Jan 2026 12:18:06 GMT

I am working with the HubSpot API, and I am trying to optimize a process where I have the ID of a deal for example:

[ID]

To retrieve the deal data along with associated contacts, I use the following endpoint:

GET https://api.hubapi.com/crm/v4/objects/deals/[ID]?associations=contacts

The response looks like this:

{
  "id": "ID",
  "properties": {
    "closedate": "2025-07-01T00:17:04.385Z",
    "createdate": "2025-06-11T00:18:31.536Z",
    "dealname": "test",
    "dealstage": "decisionmakerboughtin",
    "hs_lastmodifieddate": "2025-06-12T16:17:33.918Z",
    "hs_object_id": "38741794733",
    "pipeline": "default"
  },
  "associations": {
    "contacts": {
      "results": [
        {
          "id": "[ID]",
          "type": "deal_to_contact"
        }
      ]
    }
  }
}

The problem:

If I want to get details like the contact’s firstname, lastname, and email, I need to make a second API call for each contact using something like:

GET https://api.hubapi.com/crm/v4/objects/contacts/{contactId}?properties=firstname,lastname,email

This means additional HTTP requests per contact, which increases resource usage and response time — especially if a deal is associated with multiple contacts.

My Question:

Is there any way to retrieve both the Deal properties and the associated contacts’ properties (e.g., firstname, lastname, email) in a single API request, using just the Deal ID?

Something like this hypothetical query:

GET https://api.hubapi.com/crm/v4/objects/deals/[ID]?associations=contacts&properties=dealstage&associationsProperties=firstname,lastname,email

Ideally, I’m looking for:

•   A way to expand the associated objects (contacts) so I can directly access their properties without making extra requests.
•   A single response payload that includes the deal and its associated contacts’ data.

What I’ve tried so far:

•   Checked the official HubSpot API documentation for both /crm/v4/objects/deals and /crm/v3/objects/contacts.
•   Used ?associations=contacts which gives me the IDs, but no contact properties.
•   Looked for any associationsProperties or expand-like options (similar to GraphQL or other APIs), but couldn’t find any.