Api validation

[Saikumar12]

Hi Team,

I have a query how do I validate the API's are actually coming from Hubspot or not. After integrated my app for Security

[Saikumar12]

Thank you

[Teun · Accepted solution]

Hi @Saikumar12 ,

Hi @Saikumar12 ,

Check this doc , HubSpot uses a signature header which you can verify.

[Teun]

Hi @Saikumar12 ,

If you have created a integration, the install URL will only work with HubSpot. I didn't dive in the code that much to tell if it is not hackable. But the authentication part should only work with HubSpot. Which means that your tokens should only validate with HubSpot.

[Saikumar12]

After integration has been done how do I validate the API's are coming from Hubspot after installed the application in HubSpot