# Client Credentials Grant OAUTH flow

**URL:** <https://community.hubspot.com/t/client-credentials-grant-oauth-flow/18006>\
**Category:** HubSpot Ideas\
**Tags:** integrations\
**Created:** [January 9, 2020, 2:33pm UTC](https://community.hubspot.com/t/client-credentials-grant-oauth-flow/18006 "2020-01-09T14:33:02Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![NickDrew](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/nickdrew/32/2401_2.png) [@NickDrew](https://community.hubspot.com/u/NickDrew)\
**Post date:** [January 9, 2020, 2:33pm UTC](https://community.hubspot.com/t/client-credentials-grant-oauth-flow/18006/1 "2020-01-09T14:33:02Z")

</div>

Hubspot currently only supports the Authorization Code Grant OAuth flow, which is suitable for requesting access token via clients like browsers.

Please add an ability to use the [Client Credentials Grant OAuth flow](https://tools.ietf.org/html/rfc6749#section-4.4)so that secure clients (like a server synchronising data to hubspot) can request access tokens without the need for a url redirect unsuitable for server use-cases.

---

<div class="post-metadata">

**Author:** ![AShakhov](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/ashakhov/32/22307_2.png) [@AShakhov](https://community.hubspot.com/u/AShakhov)\
**Post date:** [May 31, 2021, 11:38am UTC](https://community.hubspot.com/t/client-credentials-grant-oauth-flow/18006/2 "2021-05-31T11:38:24Z")

</div>

Exactly, The Authorization Code grant type is used by web browsers and mobile apps, but is usless for server side interactions. Please add support of [Client Credentials - OAuth 2.0 Simplified](https://www.oauth.com/oauth2-servers/access-tokens/client-credentials/)

---

<div class="post-metadata">

**Author:** ![s3c\_mm](https://avatars.discourse-cdn.com/v4/letter/s/b77776/32.png) [@s3c\_mm](https://community.hubspot.com/u/s3c_mm)\
**Post date:** [November 24, 2022, 11:21am UTC](https://community.hubspot.com/t/client-credentials-grant-oauth-flow/18006/3 "2022-11-24T11:21:17Z")

</div>

Two and a half years later it still looks like client credential flow isn’t available. You say we can’t use a Private App if we’re using webhooks, but how are we supposed to use webhooks with Public Apps, if servers can’t communicate with one another? How can you afford to disable API keys (?hapi\_key) at the end of this month?

---

<div class="post-metadata">

**Author:** ![IsuruWee](https://avatars.discourse-cdn.com/v4/letter/i/aca169/32.png) [@IsuruWee](https://community.hubspot.com/u/IsuruWee)\
**Post date:** [December 18, 2023, 10:30am UTC](https://community.hubspot.com/t/client-credentials-grant-oauth-flow/18006/4 "2023-12-18T10:30:18Z")

</div>

Almost four years passed on, but still not enabled the client credential flow. 🙁

How is it possible to do server-to-server communication with authorization code flow? We can’t use Private Apps, because we are using workflows. So, only viable option is OAuth, but here it is a server-to-server authentication required.

What is the solution Hubspot provides us like who has to work with Workflows?