Hey Folks,
I created a legacy public app called ROAI in HubSpot which basically helps in connecting HubSpot with my web app that pulls data from HubSpot via MCP server and talks to my AI Agent. Also, it provides AI insights to end user. HubSpot community quality team, when reviewed, classified it as ‘AI Connector’. Since users were getting ‘unverified app’ warning while connecting to my HubSpot app via oauth, I submitted to get it listed in marketplace to remove that warning. HubSpot quality team responded as below -
Thank you for providing additional clarification. Your OAuth app appears to primarily connect HubSpot directly to general-purpose generative AI assistants or agents. At HubSpot, we refer to these apps as AI connectors. At this time, we have special Marketplace requirements for AI connectors.
When HubSpot designed and built its own connectors, such as the HubSpot connector for ChatGPT, we built them to enforce user-level access from the beginning. Learn more in this blog post. This model ensures that any action taken by an AI assistant or agent on a user’s behalf is strictly limited to that specific user’s existing permissions within HubSpot.
Due to the importance of user-level permissions to customer data security and privacy in AI systems, we require all new AI connectors on the Marketplace to support user-level permissions via the HubSpot Developer Platform.
Paths Forward
We understand this is significant feedback, and we want to provide you with clear, actionable next steps:
- To proceed with a Marketplace listing: You will need to rebuild your app using the official HubSpot MCP server (BETA), which is designed to enforce user-level permissions. Please note that only CRM read operations are currently available.
- Continue without a Marketplace listing: You can continue to distribute your app and drive installs outside the Marketplace. Please be aware of the new active install limits for unlisted apps using the HubSpot Developer Platform as outlined in this Developer Changelog post.
We anticipate our policies on this matter to evolve as our platform capabilities grow. We strongly encourage you to subscribe to the HubSpot Developer Changelog to stay informed of future updates and announcements.
Thank you for your understanding and your interest in building with HubSpot.
=====================================================
I can’t go with option 1 as user access is limited to read only and MCP Server is in beta with limited features rather I am using my own MCP server.
Does option 2 put a LIMIT on number of installs i.e. being unlisted app only certain number of users can use it? I couldn’t find any such thing for unlisted app. I know there is some minimum install requirement for listing but never heard of a limitaion on number of installs. I am rolling out this ‘AI Connector’ for public use for thousands of users. So, will chooosing option 2 have any impact on that? Basically, I have two main goals and I don’t really need marketplace listing, these goals are -
1. Removal of warning “Unverified App/App not reviewed by HubSpot” when end user connects their HubSpot through my ‘AI Connector’.
2. There should not be any limit on number of users using my ‘AI Connector’ to connect their HubSpot, it could be in thousands and so on.
Kindly help!
Best regards,
Faiz