# Using secrets in Marketplace React app

**URL:** <https://community.hubspot.com/t/using-secrets-in-marketplace-react-app/143383>\
**Category:** CMS Development\
**Tags:** marketplace-solutions-directory\
**Created:** [November 26, 2025, 8:20am UTC](https://community.hubspot.com/t/using-secrets-in-marketplace-react-app/143383 "2025-11-26T08:20:35Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Madhan-d](https://avatars.discourse-cdn.com/v4/letter/m/a87d85/32.png) [@Madhan-d](https://community.hubspot.com/u/Madhan-d)\
**Post date:** [November 26, 2025, 8:20am UTC](https://community.hubspot.com/t/using-secrets-in-marketplace-react-app/143383/1 "2025-11-26T08:20:35Z")

</div>

Hello,

I am developing a marketplace app in react and it communicates to an external API. The communication to external endpoint requires a secret. I was wondering what would be the best approach to store this secret. I stumbled across hs secrets. Which looks like it would fulfill the criteria. But I am not able to find any documentation on how to use those hs secrets inside my marketplace app. I did see some documentation on how serverless functions can use those secrets but that is not relevant as I am working on marketplace app. If anybody have some insights on this please share your thoughts.

---

<div class="post-metadata">

**Author:** ![kosalaindrasiri](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/kosalaindrasiri/32/44349_2.png) [@kosalaindrasiri](https://community.hubspot.com/u/kosalaindrasiri)\
**Post date:** [November 26, 2025, 6:13pm UTC](https://community.hubspot.com/t/using-secrets-in-marketplace-react-app/143383/2 "2025-11-26T18:13:34Z")

</div>

Hello @Madhan-d,

First of all, are you building a ‘UI Extension’ using HubSpot Projects, or a traditional external Web App?

Below resources might be a help to you.

> **[Fetching data for UI extensions - HubSpot docs](https://developers.hubspot.com/docs/apps/developer-platform/add-features/ui-extensions/fetching-data)**
>
> Learn the different ways to fetch data in UI extensions, including CRM hooks, actions, serverless functions, and the hubspot.fetch() API.

 ![kosalaindrasiri_0-1764180759091.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/5/1/513d8bc9d2abf7bb3cdb6a0567399d0b9116cc8f.png)

Also I found this video guide: [https://youtu.be/Y\_YayvH0dAE?si=fXZTe2MnplLEJNM1&t=420](https://youtu.be/Y_YayvH0dAE?si=fXZTe2MnplLEJNM1&t=420)

Hope these will help you!

Regards,

---

<div class="post-metadata">

**Author:** ![Madhan-d](https://avatars.discourse-cdn.com/v4/letter/m/a87d85/32.png) [@Madhan-d](https://community.hubspot.com/u/Madhan-d)\
**Post date:** [November 27, 2025, 7:17am UTC](https://community.hubspot.com/t/using-secrets-in-marketplace-react-app/143383/3 "2025-11-27T07:17:09Z")

</div>

It is a ‘UI Extension’ using HubSpot Projects’. Yeah we are not storing any secrets in code. But the market place app should make a request to an external endpoint and that endpoint needs a code to authenticate the request. Yes we are also validating the hubspot signature in the backend when handling the request. Adding the code adds another layer of security to protect our endpoints. That is why been looking if there is a recommended way to store these secrets. hs secrets is also something that would be suitable. Unfortunately that is not available with UI extensions projects app

---

<div class="post-metadata">

**Author:** ![Berangere](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/berangere/32/220784_2.png) [@Berangere](https://community.hubspot.com/u/Berangere)\
**Post date:** [December 1, 2025, 10:33am UTC](https://community.hubspot.com/t/using-secrets-in-marketplace-react-app/143383/4 "2025-12-01T10:33:07Z")

</div>

Hi @Madhan-d,  
Thank you so much for taking the time to share your valuable feedback, it truly means a lot to us!

I recommend submitting your thoughts through the [HubSpot Developer Feedback form](https://developers.hubspot.com/feedback) so they reach the right team, but if you’d prefer, I’d be more than happy to submit it for you.

If there’s anything else you need or any way I can assist further, please let me know, I’m always here and happy to help!

Wishing you a wonderful day,  
Bérangère

---

<div class="post-metadata">

**Author:** ![Madhan-d](https://avatars.discourse-cdn.com/v4/letter/m/a87d85/32.png) [@Madhan-d](https://community.hubspot.com/u/Madhan-d)\
**Post date:** [December 1, 2025, 11:20am UTC](https://community.hubspot.com/t/using-secrets-in-marketplace-react-app/143383/5 "2025-12-01T11:20:31Z")

</div>

Yes please, You can submit it to the right developer feedback forum. Thank you

---

<div class="post-metadata">

**Author:** ![Berangere](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/berangere/32/220784_2.png) [@Berangere](https://community.hubspot.com/u/Berangere)\
**Post date:** [December 1, 2025, 3:30pm UTC](https://community.hubspot.com/t/using-secrets-in-marketplace-react-app/143383/6 "2025-12-01T15:30:32Z")

</div>

Thank you so much for confirming @Madhan-d ! I went ahead and submitted your feedback to the developer forum.  
If you have any other suggestions or questions, feel free to share, I’m always here to help.  
Thanks again for your input! 😊  
Bérangère
