HubSpot
Receive HubSpot webhook events in Wexio flows
Wexio verifies HubSpot signature v3 natively. HubSpot sends X-HubSpot-Signature-v3 and X-HubSpot-Request-Timestamp, and Wexio rejects requests older than 5 minutes. Inbound webhooks need the Pro or Enterprise plan.
This page is about sending HubSpot webhook events into Wexio. To sync contacts with HubSpot, see the CRM integration.
Setup
1. Connect It in Wexio
Go to Settings → Webhooks and API → Webhooks → New connection → Inbound and click the HubSpot chip under Dedicated providers, or set Authentication mode to HubSpot (signature v3) manually. Copy the Wexio endpoint URL.
2. Set Up the Provider
In HubSpot, set the target URL of your webhook subscription to the Wexio endpoint URL and subscribe to the events you need.
HubSpot signs with your app's client secret. Copy it from Development → your app → Auth → Client secret. For a webhook in a private app, use that app's client secret. Paste it into the Wexio Signing secret field.
Leave Public URL (optional) empty to use the endpoint address Wexio shows. If you registered a different https:// URL in HubSpot, for example behind your own domain, enter that exact URL. HubSpot signs the URL it called, so the two must match.
3. Resolve Contacts
Pick the field in the HubSpot payload that matches a Wexio contact. Capture a sample event to see the payload shape, as described in Inbound Webhooks.
4. Bind a Flow
Attach a Webhook Received trigger to the connection and branch on the event type field in the payload.
Check That It Works
Trigger a HubSpot event, then open Webhook History. A request that passed verification is listed as received. A failed one shows its error.
Troubleshooting
| Symptom | Fix |
|---|---|
UNAUTHORIZED: HubSpot signature mismatch | The client secret is wrong, or the Public URL (optional) differs from the target URL registered in HubSpot. Make both match exactly |
UNAUTHORIZED: Missing X-HubSpot-Signature-v3 or X-HubSpot-Request-Timestamp header | The request does not carry a v3 signature. Check the signature version of the HubSpot app |
UNAUTHORIZED: HubSpot signature timestamp outside ±5 min tolerance | The request is older than 5 minutes, or the sender clock is off. Trigger a new event |
Related
- Inbound Webhooks - auth modes, contact resolution and response codes
- Webhook Received - the trigger that starts your flow
- Webhook History - check why a request failed