# Install web hook without getting access token?

**URL:** <https://community.hubspot.com/t/install-web-hook-without-getting-access-token/80570>\
**Category:** APIs & Integrations\
**Tags:** oauth, webhooks\
**Created:** [May 4, 2023, 1:19pm UTC](https://community.hubspot.com/t/install-web-hook-without-getting-access-token/80570 "2023-05-04T13:19:39Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![FGamer](https://avatars.discourse-cdn.com/v4/letter/f/53a042/32.png) [@FGamer](https://community.hubspot.com/u/FGamer)\
**Post date:** [May 4, 2023, 1:19pm UTC](https://community.hubspot.com/t/install-web-hook-without-getting-access-token/80570/1 "2023-05-04T13:19:39Z")

</div>

I created a public app to use the webhook feature of the app to react on certain events. However, I do not want to query any data from HubSpot, but only want to be informed if a change happens. Therefore (if I understand correctly), I don’t need any access token nor a refresh token. Nevertheless, it seems like my app is only installed in my HubSpot account if I actually exchange the authorization code for an access token. Which means I need to create a server, to use for the redirection call, and build the function to exchange the authorization code.  
Is my understanding correct, or did I get anything wrong? Is that the only way to use the webhook function of an app?

Thanks for any clarification!

---

<div class="post-metadata">

**Author:** ![tominal](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/tominal/32/73018_2.png) [@tominal](https://community.hubspot.com/u/tominal)\
**Post date:** [May 4, 2023, 7:55pm UTC](https://community.hubspot.com/t/install-web-hook-without-getting-access-token/80570/2 "2023-05-04T19:55:31Z")

</div>

Hey @FGamer,

The short answer is yes. In order for an application to be installed on a portal, it must go through the entire OAuth process first. My guess is that HubSpot requires the initial exchange in order to verify that your service is actually up and running.

Hope that helps!

---

<div class="post-metadata">

**Author:** ![FGamer](https://avatars.discourse-cdn.com/v4/letter/f/53a042/32.png) [@FGamer](https://community.hubspot.com/u/FGamer)\
**Post date:** [May 5, 2023, 5:18am UTC](https://community.hubspot.com/t/install-web-hook-without-getting-access-token/80570/3 "2023-05-05T05:18:43Z")

</div>

Hey Thomas,

thanks, that helps indeed! I guess, since I only need the webhook feature, I should try to use webhooks in workflows instead since I’m not interested in publishing an App.  
Best  
Frederick