Additional details returned when generating OAuth access tokens

[Dadams]

What's changing?

We're adding two additional fields to the response when generating an access token using the POST /oauth/v1/token endpoint:

• hub_id: the Hub ID for the token
• scopes: the scopes for the token. This will include any requested optional scopes that were available to the user in the selected account.

You can see an example below:

Example response

{
  "token_type": "bearer",
  "refresh_token": "na1-ab12-cd34-ef56-gh78-abcdef123456",
  "hub_id": 62515,
  "scopes": [
    "oauth",
    "crm.objects.contacts.write",
    "crm.objects.contacts.read"
  ],
  "access_token": "AAA1234-TOKEN",
  "expires_in": 1800
} 

Copy

These fields will match the same values that would be returned when getting the information for the access token.

These new fields will automatically be included for any request to generate an access token, whether this is the initial token generated using an auth code, or refreshing the access token using the refresh token after the initial token expires.

When is this happening?

The new fields will be added to the response beginning on August 18, 2025.

If you'd like to try the new fields early, you can opt into the beta from the product updates page in your HubSpot account.

Please let us know if you have any questions by replying below.