Hello HubSpot developers,
We are testing a project-based private app with static authentication on developer platform version 2026.03. The app requests only crm.objects.deals.read. We used HubSpot CLI 8.16.0 with a personal access key limited to developer.projects.write; project upload and deployment succeeded.
Before running a custom workflow action, we need to verify the exact numeric actionDefinitionVersion expected in its callback. A read-only GET to /automation/v4/actions/{appId}/{definitionId}, authenticated through the CLI’s PAK-backed HTTP client, returned HTTP 401 with category INVALID_AUTHENTICATION. We have not established the cause. We have not executed the workflow or added credentials or scopes to resolve this.
Could you clarify:
- Which supported endpoint and authentication method should a project-based private/static app use to read its deployed custom workflow action definition, and what are the minimum permissions? Is a personal access key supported, or is a developer API key required?
- Which returned field maps to the numeric
actionDefinitionVersionsent in callbacks? How does it relate to the definition revision, project build number, and project subbuild revision UUID? - Can we verify that value before executing the workflow using supported CLI or app-management functionality without adding account-wide credentials?
The temporary test workflow is off, and the test app installation and tunnel have been removed. I have also submitted this question through official support and am looking for a documented approach before another controlled test.
Thank you.
This post was prepared with AI assistance; the reported test observations were checked against our execution records.