topic Webhook and API Key in APIs & Integrations

Webhook and API Key

THa51 — Mon, 02 Jun 2025 05:44:09 GMT

Hello,

I am trying to create a WebHook in Private app integration.

I can do this, but currently the web hook created does not have anywhere where I can supply an API Key from the server of the WebHook. eg. My webhook server is AWS Gateway API. In AWS gateway, I have an option for any client that connect must supply and API Key as defined by the AWS gateway API.

How can I supply the AWS Gateway API key to the HubSpot Webhook to post along during a webhook call?

Note that I am aware of "X-HubSpot-Signature", and this is not what am I referring to.

Thank you,

Tam

Re: Webhook and API Key

BrandonWoodruff — Mon, 02 Jun 2025 13:24:47 GMT

Hello! HubSpot doesn't natively support attaching custom headers. but here are three workarounds that you could try that may help?

1. Use an Intermediary Proxy Layer
- Build a service that receives the webhook from HubSpot, adds the necessary header, and then forwards the request to your AWS API Gateway

2. Switch to OAuth and remove API Key Requirement
- You could utilize HubSpots public app +OAuth for auth, and then allow your AWS endpoint to verify bia token or signature from that.

3. Use Query Parameters for your key delivery
- If your API Gateway can accept the key via the query string If your AWS API Gateway can accept the API key via query string (e.g., https://example.execute-api.aws.com/hook?apiKey=your-key), configure the HubSpot webhook URL with the key embedded.

NOTE: This third option is a lot less secure, and I would suggest doing one of the other two options.

Let me now if any of these options help, or if there is any more clarifications that I can provide!

✔️ Was I able to help answer your question? Help the community by marking it as a solution.

Brandon Woodruff
Senior Software Developer with Pearagon

Still have questions? Reach out at brandon@pearagon.com

Re: Webhook and API Key

THa51 — Mon, 02 Jun 2025 23:53:00 GMT

Thank you for your response. Knowling now that this feature is not OOTB, then we will look into other options. Thanks again.