Hey team, hitting a blocker setting up a custom OAuth2 auth config for the HubSpot toolkit and could use some guidance.
Configuration
- Toolkit: HubSpot
- Auth scheme: OAuth2 (custom credentials from my own HubSpot developer-platform app)
- Base URL: https://api.hubapi.com
- HubSpot redirectUrls in app-hsmeta.json: https://backend.composio.dev/api/v3/toolkits/auth/callback
- Scopes: 35, mirrored exactly between HubSpot requiredScopes and the Composio auth config
Repro steps
1. Open the HubSpot custom auth config in the Composio dashboard
2. Trigger the connect / test connection flow
3. HubSpot consent screen loads, approve all requested scopes
4. Browser redirects back to Composio
5. Page renders "invalid state" and the connection is not created
(Earlier I had https://backend.composio.dev/api/v1/auth-apps/add as my redirect URL. That path returned Cloudflare 1016 / 530 from hermes.composio.dev, which matches closed issue #2909. Switched to v3 per that thread, now hitting
this.)
What I'm asking
1. Is there something I'm misconfiguring on my end?
2. Is the v3 callback the one I should be using, or has it moved?
3. Any workaround to get a connected account created in the meantime?
Happy to share my auth config ID, screenshots, privately.
https://cdn.discordapp.com/attachments/1498786089622573238/1498786089916436611/Screenshot_2026-04-28_at_1.33.14_PM.png?ex=69f26cd1&is=69f11b51&hm=1cff50b0e6edaefd9b1077a4644a1748907c25c5ce4f191a58903ec3ab9c26fa&