# Can I send a request from a website?

**URL:** <https://community.hubspot.com/t/can-i-send-a-request-from-a-website/32727>\
**Category:** APIs & Integrations\
**Tags:** developer-tools\
**Created:** [March 5, 2021, 6:53am UTC](https://community.hubspot.com/t/can-i-send-a-request-from-a-website/32727 "2021-03-05T06:53:21Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![yousan](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/yousan/32/26012_2.png) [@yousan](https://community.hubspot.com/u/yousan)\
**Post date:** [March 5, 2021, 6:53am UTC](https://community.hubspot.com/t/can-i-send-a-request-from-a-website/32727/1 "2021-03-05T06:53:21Z")

</div>

Hello.

I want to embed stuffs about HubSpot.

My website is closed and only for our company.

At the website, I want to request HubSpot API and get companies at HubSpot.

I searched and I got this article.

[https://developers.hubspot.com/docs/api/faq#CORS\_AJAX](https://developers.hubspot.com/docs/api/faq#CORS_AJAX)

I am thinking HubSpot cannot send CORS header as \* so I cannot access.

How can I get the data?

Thanks.

---

<div class="post-metadata">

**Author:** ![dennisedson](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/dennisedson/32/28044_2.png) [@dennisedson](https://community.hubspot.com/u/dennisedson)\
**Post date:** [March 8, 2021, 4:50pm UTC](https://community.hubspot.com/t/can-i-send-a-request-from-a-website/32727/2 "2021-03-08T16:50:25Z")

</div>

Hi @yousan

Are you still working on this?

Have you considered [creating an app](https://developers.hubspot.com/docs/api/developer-tools-overview) that can serve as middleware?

@tjoyce , what are your thoughts?

---

<div class="post-metadata">

**Author:** ![tjoyce](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/tjoyce/32/88832_2.png) [@tjoyce](https://community.hubspot.com/u/tjoyce)\
**Post date:** [March 8, 2021, 6:25pm UTC](https://community.hubspot.com/t/can-i-send-a-request-from-a-website/32727/3 "2021-03-08T18:25:12Z")

</div>

@yousan - Even if the website is closed to the outside, you should still use a server side process to handle the API connection and deliver data to the front-end website. A simple malicious chrome extension could very easily gain access to your sensitive HS information even through an intranet webpage. The best way to mitigate that is by using server code to pass data to the website.

Do you know what server language your website is using?

---

<div class="post-metadata">

**Author:** ![yousan](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/yousan/32/26012_2.png) [@yousan](https://community.hubspot.com/u/yousan)\
**Post date:** [April 5, 2021, 10:31am UTC](https://community.hubspot.com/t/can-i-send-a-request-from-a-website/32727/4 "2021-04-05T10:31:29Z")

</div>

@tjoyce Thank you for your reply. We are implementing server side programming for HubSpot API. It is really nice 😉

But some usecase is fit for front-end implementation. So we want to try front-end connection.

The system is closed and only few people (only our teammates) usigng the system. We try something. Thankyou.