# About attachment to an external app

**URL:** <https://community.hubspot.com/t/about-attachment-to-an-external-app/139331>\
**Category:** APIs & Integrations\
**Tags:** starter\
**Created:** [September 10, 2025, 6:28pm UTC](https://community.hubspot.com/t/about-attachment-to-an-external-app/139331 "2025-09-10T18:28:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![SanyaMacwan](https://avatars.discourse-cdn.com/v4/letter/s/d07c76/32.png) [@SanyaMacwan](https://community.hubspot.com/u/SanyaMacwan)\
**Post date:** [September 10, 2025, 6:28pm UTC](https://community.hubspot.com/t/about-attachment-to-an-external-app/139331/1 "2025-09-10T18:28:50Z")

</div>

> Hi everyone. I’m exploring how to connect an external app to a HubSpot account for **reading and analyzing data**. From what I understand, the options might include **OAuth flows** , **Private App tokens** , **Hub ID** , or possibly a **normal HubSpot login**. Could someone clarify which of these are actually supported, and what the **best practice** is today?”

---

<div class="post-metadata">

**Author:** ![Jaycee\_Lewis](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/jaycee_lewis/32/61352_2.png) [@Jaycee\_Lewis](https://community.hubspot.com/u/Jaycee_Lewis)\
**Post date:** [September 10, 2025, 6:50pm UTC](https://community.hubspot.com/t/about-attachment-to-an-external-app/139331/2 "2025-09-10T18:50:21Z")

</div>

Hey, @SanyaMacwan 👋 Here is the most current inforation on creating an app and getting your auth set up — [**Create a new app using the CLI**](https://developers.hubspot.com/docs/apps/developer-platform/build-apps/create-an-app). — Jaycee

---

<div class="post-metadata">

**Author:** ![SanyaMacwan](https://avatars.discourse-cdn.com/v4/letter/s/d07c76/32.png) [@SanyaMacwan](https://community.hubspot.com/u/SanyaMacwan)\
**Post date:** [September 10, 2025, 8:01pm UTC](https://community.hubspot.com/t/about-attachment-to-an-external-app/139331/3 "2025-09-10T20:01:38Z")

</div>

Thanks! Quick follow-up: for an external app that needs read-only access across multiple HubSpot accounts, is **OAuth** the recommended approach vs. a **static token** (private app) tied to one account? Any official guidance on when to pick one over the other for long-term, multi-tenant use?

---

<div class="post-metadata">

**Author:** ![Jaycee\_Lewis](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/jaycee_lewis/32/61352_2.png) [@Jaycee\_Lewis](https://community.hubspot.com/u/Jaycee_Lewis)\
**Post date:** [September 11, 2025, 3:10pm UTC](https://community.hubspot.com/t/about-attachment-to-an-external-app/139331/4 "2025-09-11T15:10:30Z")

</div>

Hey, @SanyaMacwan 👋 For multi-account use, OAuth is your choice. More details here —[**Auth overview**](https://developers.hubspot.com/docs/apps/developer-platform/build-apps/authentication/overview#oauth) .