canonical: https://jentic.com/apis/hubapi.com/hubspot-domains

# HubSpot Domains

Jentic publishes the only available OpenAPI specification for HubSpot CMS Domains, keeping it validated and agent-ready. The HubSpot CMS Domains API exposes the connected domains attached to a HubSpot CMS portal - including primary, secondary, and HubSpot-hosted preview domains. It returns metadata such as the domain name, whether SSL is provisioned, and which content type (site, blog, landing pages) the domain is mapped to. It is the read surface for understanding which sites a HubSpot portal currently publishes to.

## For AI agents

List connected HubSpot CMS domains and inspect any single domain's SSL status, content types, and primary mapping.

## Scope

Does not register, purchase, or modify domains, and does not manage DNS - use only for reading HubSpot CMS connected domain configuration.

## Capabilities

- List every domain currently connected to a HubSpot CMS portal via GET /cms/v3/domains/
- Retrieve a specific domain's full configuration through GET /cms/v3/domains/{domainId}
- Inspect each domain's SSL provisioning state for compliance and pre-launch checks
- See which content types (website, blog, landing pages, knowledge base) each domain serves
- Identify the primary domain for canonical URL planning

## Use cases

### Pre-Launch Domain Audit

Before launching a marketing site, list all connected domains in HubSpot to confirm the new domain is attached, SSL is provisioned, and the right content types are mapped. GET /cms/v3/domains/ returns the full inventory in a single call so a release engineer or agent can verify state before flipping DNS.

Example prompt: GET /cms/v3/domains/ and verify the new domain is present with primary=false and ssl provisioned before cutover.

### Compliance and Brand Inventory

For compliance or brand audits, pull every domain across HubSpot portals to confirm only approved domains are active and serving content. The API is read-only, so the audit cannot accidentally change configuration.

Example prompt: GET /cms/v3/domains/ across all connected portals and flag any domain not on the approved-brand list.

### Canonical URL Discovery for Sitemaps

When generating sitemaps or canonical URL maps for SEO tooling, identify the HubSpot primary domain by reading /cms/v3/domains/. Mapping the primary domain ensures every URL emitted is the canonical one HubSpot serves.

Example prompt: GET /cms/v3/domains/ and pick the entry where primary is true to use as the canonical base URL for sitemap entries.

### AI Agent Domain Inspection via Jentic

An AI agent that runs site-readiness or compliance checks calls Jentic to fetch a HubSpot portal's connected domains and reason about their SSL and content-type configuration without needing direct HubSpot dashboard access.

Example prompt: Search Jentic for list hubspot connected domains, load /cms/v3/domains/, and execute, then summarise SSL and primary status per domain.

## Key endpoints

| Method | Path | Description |
| --- | --- | --- |
| GET | /cms/v3/domains/ | List all connected CMS domains |
| GET | /cms/v3/domains/{domainId} | Get a single CMS domain |

## Key resources

- **Domains** — List and inspect connected HubSpot CMS domains

## Why Jentic

- **Setup:** Wiring HubSpot Domains by hand means choosing between its hapikey query, OAuth, and private-app auth, keeping the api.hubapi.com host straight across the cms v3 domain endpoints, and handling errors yourself. Through Jentic you install once, import Domains from the API Directory, store the credential once, and your agent calls it.
- **Permission scoping:** Domains serves read-only connected-domain configuration, so scope your agent to the operations it needs, such as listing domains or reading one by id. You choose which calls are in the allowed set, and every operation here is a read, so nothing mutates domain or DNS configuration.
- **Credential handling:** Your HubSpot credential is stored once, encrypted, by your own Jentic One instance and injected per call at execution time. It never enters the agent's prompt, logs, or context.
- **Discovery method:** Agents search Jentic by intent such as 'list HubSpot connected domains' or 'read a domain configuration', and Jentic returns the matching read operation with its input schema so the agent calls the right endpoint without browsing the reference docs.

## Related APIs

- **HubSpot CMS API** — Manage CMS pages, blog posts, and content the domains serve
- **HubSpot Marketing API** — Marketing assets like landing pages and emails that often map to the same HubSpot domains
- **HubSpot Webhooks API** — Subscribe to broader HubSpot CMS and CRM events to trigger domain checks reactively

## FAQ

### Why is there no official OpenAPI spec for HubSpot Domains?

HubSpot does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call Domains via structured tooling. It is validated against the live API and kept up to date. Get started with Jentic One, the self-hosted execution layer.

### What authentication does the HubSpot Domains API use?

The Domains API supports HubSpot hapikey (query), OAuth 2.0 authorization code with cms.domains.read or cms.domains.write scopes, and private-app tokens (private-app or private-app-legacy header). Through Jentic, the configured credential is held in the encrypted vault and injected at execution.

### Can I create or modify a domain through this API?

No. The CMS Domains API exposes read-only operations: GET /cms/v3/domains/ to list and GET /cms/v3/domains/{domainId} to retrieve a single domain. Connecting or removing domains is done through the HubSpot dashboard.

### What are the rate limits for the HubSpot Domains API?

Rate limits follow HubSpot's standard tiers - typically 100 requests per 10 seconds per hapikey, higher under OAuth on Enterprise plans. Domain inventories rarely require high call volume, so limits are unlikely to be hit in normal use.

### How do I check SSL status for a specific HubSpot domain through Jentic?

Search Jentic for get a hubspot domain, load GET /cms/v3/domains/{domainId}, and execute with the domainId. The response includes the SSL provisioning state alongside content-type mapping.

### Does the API distinguish between primary and secondary domains?

Yes. Each domain entry returned from /cms/v3/domains/ includes a primary boolean indicating whether HubSpot treats it as the canonical domain for the portal.

### Can I limit what my agent is allowed to do with the HubSpot CMS Domains API?

Yes. Because you run Jentic One yourself, your own rules decide which operations your agent may call and which HubSpot credential it may use. The HubSpot CMS Domains API is read-only, so you can restrict the agent to just listing connected domains via GET /cms/v3/domains/ or reading a single domain via GET /cms/v3/domains/{domainId}, and every allowed call is a read that cannot alter domain or DNS configuration.