---
title: HubSpot
summary: Connect a HubSpot account so your AI agents can look up contacts, companies, deals, and tickets, log activities, and update CRM records under permissions you control.
category: integrations
slug: hubspot
---

## What HubSpot in Kronos lets your agents do

Once a HubSpot account is connected to Kronos, your agents can — within
the permissions you grant — work with your CRM the way you would in
HubSpot:

**Read actions** (available when an agent has "Read only" or higher):

- Search and list contacts, companies, deals, and tickets, with
  filters and properties.
- Open a specific record by id and read its details and properties.
- Look up the associations between records (which contacts belong to a
  company, which deals are tied to a contact, etc.).
- List your pipelines and their stages.
- List the owners (team members) on the account.
- Read notes, calls, emails, meetings, and other activities logged on a
  record.

**Write actions** (available only when an agent has "Read and write"):

- Create a new contact, company, deal, or ticket.
- Update properties on an existing record.
- Move a deal or ticket to a different stage.
- Associate or unassociate records (link a contact to a company, a deal
  to a contact, etc.).
- Log a note, call, email, or other activity on a record.
- Delete a record.

You decide which agent gets which level, and you can switch any
permission off in one click without disconnecting the HubSpot account.

## Connecting HubSpot

1. Open Kronos → **Connect** in the sidebar → **Applications** tab.
2. Click the **HubSpot** card to open the detail dialog, then click the
   green **Connect** button.
3. You land on HubSpot's sign-in screen — sign in and choose the
   account (HubSpot portal) you want to connect.
4. Review the access HubSpot will grant Kronos and approve it.
5. You're sent back to Kronos at the **Already connected** tab with the
   new HubSpot entry pre-selected.

You can connect more than one HubSpot account; each appears as its own
entry.

## Naming the connection

The HubSpot management page shows the connection under the "HubSpot"
title. If you manage more than one HubSpot account, add a short personal
note next to each one (the "Your note for this connection" field) —
labels like "Sales CRM" or "Support Portal" make a long list easier to
scan. The note is yours only.

## Giving an agent access

On the HubSpot management page click **+ Add AI Agent**, pick the agent
from the dropdown, then choose:

- **Off** — the agent cannot touch this HubSpot account.
- **Read only** — the agent can search, list, and read records, but
  cannot create, update, move, associate, or delete anything.
- **Read and write** — the agent can do all of the above plus create,
  update, move, associate, log activities, and delete records.

The same controls are available inside the AI Agent editor — scroll to
the **Connected Apps** section.

## Fine-grained overrides

Inside the permissions modal (the gear icon next to a HubSpot account in
the agent editor or on the HubSpot management page) you'll see the full
list of HubSpot actions grouped by **Read tools** and **Write tools**.
Toggle individual actions on or off to override the preset.

Common combinations:

- **Pipeline-lookup agent**: preset Read only, no overrides. Agent
  answers "what's the status of the Acme deal?" but changes nothing.
- **Lead-capture agent**: preset Read only, override `Create contact`
  ON. Agent can read the CRM and add new contacts, but cannot modify or
  delete existing records.
- **Note-logging agent**: preset Read only, override `Log activity` ON.
  Agent can read records and log notes/calls, but cannot move deals or
  delete anything.
- **Full CRM assistant**: preset Read and write, override `Delete
  record` OFF. Agent can do everything except permanent deletion.

Click Save to apply. Changes take effect on the next message the agent
processes.

## Multiple HubSpot accounts on the same agent

If an agent has access to two or more HubSpot accounts, the agent picks
which account to use on every action based on context. When the request
is ambiguous, the agent will ask which account to use.

You can cut ambiguity by turning the agent's access to one of the
accounts off, or by adding obviously distinct notes ("Sales CRM" vs
"Support Portal").

## When something goes wrong

- **"Needs reconnect"** badge — HubSpot revoked or expired the
  connection. Open `/app/connect`, click HubSpot, walk through Connect
  again. Permissions are preserved.
- **Agent says "I can't update that record"** — that agent's permission
  preset is Off or Read only without the matching write override. Open
  the permissions modal and adjust.
- **Agent says the connected app is temporarily unavailable** — HubSpot
  or the connection had a transient hiccup. Ask the user to retry in a
  moment. If it persists, check the HubSpot management page for a
  "Needs reconnect" badge.
- **Agent says it's being rate-limited** — HubSpot limits how many
  requests can run in a short window. Wait a moment and retry.

## Privacy

Kronos does NOT store the content of your HubSpot records. Each time an
agent uses a HubSpot action, it fetches just-in-time from HubSpot
through the connection, uses what it needs to complete the task, and
discards the result. The audit log records that the action happened
(which agent, which action, when, and whether it succeeded), but not the
record contents.

When you disconnect HubSpot or cancel your Kronos subscription, the
connection and all per-agent permissions are deleted immediately.