Skip to content

feat: add hubspot-webhooks skill#45

Merged
leggetter merged 3 commits into
mainfrom
feat/hubspot-webhooks
May 11, 2026
Merged

feat: add hubspot-webhooks skill#45
leggetter merged 3 commits into
mainfrom
feat/hubspot-webhooks

Conversation

@leggetter
Copy link
Copy Markdown
Collaborator

Summary

Adds a complete hubspot-webhooks provider skill — HubSpot v3 signature verification (HMAC-SHA256, base64) with method + URI + raw body + timestamp, plus 5-minute replay protection.

What's included

  • skills/hubspot-webhooks/SKILL.md — entry point
  • skills/hubspot-webhooks/references/ — overview, setup, verification (v3 details)
  • skills/hubspot-webhooks/examples/ — Express, Next.js App Router, FastAPI handlers
  • Manual signature verification (HubSpot does not ship an SDK helper)
  • Tests that generate real signatures

Notes

  • Header: X-HubSpot-Signature-v3 (HMAC-SHA256, base64)
  • Signed content: HTTP method + request URI + raw body + X-HubSpot-Request-Timestamp value
  • Reject if timestamp older than 5 minutes
  • Signing key: App's Client Secret (Application Secret)
  • v1 and v2 signature schemes are legacy/deprecated — skill targets v3 only
  • Common subscription types: contact.creation, contact.propertyChange, deal.creation, deal.propertyChange, company.creation, ticket.creation

Test plan

Generation details

https://claude.ai/code/session_01NNTgQRJss1V7gyzzJ9rjnB


Generated by Claude Code

claude and others added 3 commits May 11, 2026 23:10
Adds a complete skill for receiving HubSpot webhooks with v3
signature verification (HMAC-SHA256, base64) over method + URI +
raw body + X-HubSpot-Request-Timestamp, plus a 5-minute replay
window. Includes Express, Next.js App Router, and FastAPI examples
with manual verification (HubSpot does not ship an SDK helper) and
tests that generate real signatures.

https://claude.ai/code/session_01NNTgQRJss1V7gyzzJ9rjnB
Adds the HubSpot row to the Provider Skills table in README.md and a
providers.yaml entry (docs URLs, notes, testScenario) so the
"Validate New Provider" CI workflow finds the integration files. The
integrations were previously only on the prep branch (PR #40); moving them
onto each feat PR makes the 12 generated PRs independently mergeable in
any order.

https://claude.ai/code/session_01NNTgQRJss1V7gyzzJ9rjnB
…rce arg

Applies the new project convention from PR #40: use
`npx hookdeck-cli listen <port> <source> --path /webhooks/<source>`
everywhere instead of `hookdeck listen <port> --path /webhooks/<source>`.
Skips the global-install prereq (webhook-skills is provider-neutral) and
passes the required `[source]` positional so the command is copy-paste-
runnable without falling into an interactive prompt.

https://claude.ai/code/session_01NNTgQRJss1V7gyzzJ9rjnB
@leggetter leggetter force-pushed the feat/hubspot-webhooks branch from 81d8806 to 82b3f41 Compare May 11, 2026 22:14
@leggetter leggetter marked this pull request as ready for review May 11, 2026 22:14
@leggetter leggetter merged commit 6fe10df into main May 11, 2026
6 checks passed
@leggetter leggetter deleted the feat/hubspot-webhooks branch May 11, 2026 22:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants