HubSpot: Create a SMTP API token

← Transactional email operations · Get started

Operation hubspot.transactional_email_create_smtp_tokens

Provider route: POST /marketing/transactional/2026-09/smtp-tokens. Alter supplies the connection’s credentials and routing.

Call through Alter

Install @alter-ai/sdk @alter-ai/hubspot with npm, or alter-sdk-hubspot with pip. Supply your connected customer’s grant ID and the arguments described below.

import { App } from "@alter-ai/sdk";
import { HubSpotIntegration } from "@alter-ai/hubspot";

async function execute(input: Parameters<HubSpotIntegration["transactionalEmail"]["createSmtpTokens"]>[0]) {
  const app = new App({ apiKey: process.env.ALTER_API_KEY! });
  try {
    const provider = new HubSpotIntegration(app, { grantId: process.env.PROVIDER_GRANT_ID! });
    const call = await provider.transactionalEmail.createSmtpTokens(input);
    const result = await call.wait();
    return result.bodyJson();
  } finally {
    await app.close();
  }
}

import os
from alter_sdk import App
from alter_sdk_hubspot import HubSpotIntegration

async def execute(arguments):
    async with App(api_key=os.environ["ALTER_API_KEY"]) as app:
        provider = HubSpotIntegration(app, {"grant_id": os.environ["PROVIDER_GRANT_ID"]})
        call = await provider.transactional_email.create_smtp_tokens(arguments)
        result = await call.wait()
        return result.body_json()

Input

Field	Type	Presence	Description and constraints
$	object	Root	Additional keys: not allowed
body	Model	Required within parent	Expand Create a SMTP API token — request body — body

Referenced models: Create a SMTP API token — request body — body

Response

Response media type: application/json. The table describes the pinned successful response. Referenced models link to their complete fields.

Field	Type	Presence	Description and constraints
$	Model	Root	Expand Create a SMTP API token — response body

Referenced models: Create a SMTP API token — response body

Schemas

Create a SMTP API token — response body

Field	Type	Presence	Description and constraints
$	object	Root
campaignName	string	Required within parent	A name for the campaign tied to the token.
createContact	boolean	Required within parent	Indicates whether a contact should be created for email recipients.
createdAt	string	Required within parent	Timestamp generated when a token is created. Format: date-time
createdBy	string	Required within parent	Email address of the user that sent the token creation request.
emailCampaignId	string	Required within parent	Identifier assigned to the campaign provided in the token creation request.
id	string	Required within parent	User name to log into the HubSpot SMTP server.
password	string	Optional	Password used to log into the HubSpot SMTP server.

Create a SMTP API token — request body — body

Field	Type	Presence	Description and constraints
$	object	Root
campaignName	string	Required within parent	A name for the campaign tied to the SMTP API token.
createContact	boolean	Required within parent	Indicates whether a contact should be created for email recipients.

Policy, approvals and errors

SDK function policy ID: hubspot.transactional_email_create_smtp_tokens. Catalog operation: transactional_email_create_smtp_tokens. Rules can name either ID; function rules distinguish managed calls and conservatively cover raw calls sharing the route. Existing grant permissions and policy rules apply. wait() returns an immediate result or waits for a required approval; it never approves the request itself. Persist the approval ID to resume after a restart.

Refused by default. This operation leaves the caller holding a credential (it creates a HubSpot SMTP API token and returns its password, which authenticates mail sent through HubSpot), so Alter refuses it on every connection with credential_minting_refused unless an organization admin allows it: a credential_minting rule naming provider hubspot and operation hubspot.transactional_email_create_smtp_tokens (or transactional_email_create_smtp_tokens). See Allow an operation that hands over a credential.

Provider errors retain their response; JSON decoding raises ProviderAPIError for provider failures. ManagedOperationError identifies contract/input/retention errors. See error handling and provider-specific behavior. Sensitive input may be refused before approval storage. A decoding error never resubmits a write.

Required provider scopes: ["transactional-email"]

Official provider source