HubSpotAuthBehavioral
Security requirements changed for GET /crm/v3/pipelines/{objectType}/{pipelineId}/stages
- Affected surface
- GET /crm/v3/pipelines/{objectType}/{pipelineId}/stages
What changed
Security requirements changed for GET /crm/v3/pipelines/{objectType}/{pipelineId}/stages Affected surface: GET /crm/v3/pipelines/{objectType}/{pipelineId}/stages. Detected at Mon, 01 Jun 2026 21:26:15 UTC UTC.
Diff
{
"current_value": [
{
"oauth2": [
"automation"
]
},
{
"oauth2": [
"cpq.quotes.read"
]
},
{
"oauth2": [
"cpq.quotes.write"
]
},
{
"oauth2": [
"crm.objects.appointments.read"
]
},
{
"oauth2": [
"crm.objects.appointments.sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.appointments.sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.appointments.write"
]
},
{
"oauth2": [
"crm.objects.calls.read"
]
},
{
"oauth2": [
"crm.objects.carts.read"
]
},
{
"oauth2": [
"crm.objects.commercepayments.write"
]
},
{
"oauth2": [
"crm.objects.companies.highly_sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.companies.highly_sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.companies.read"
]
},
{
"oauth2": [
"crm.objects.companies.sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.companies.sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.companies.write"
]
},
{
"oauth2": [
"crm.objects.contacts.highly_sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.contacts.highly_sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.contacts.read"
]
},
{
"oauth2": [
"crm.objects.contacts.sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.contacts.sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.contacts.write"
]
},
{
"oauth2": [
"crm.objects.courses.read"
]
},
{
"oauth2": [
"crm.objects.courses.write"
]
},
{
"oauth2": [
"crm.objects.custom.highly_sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.custom.highly_sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.custom.read"
]
},
{
"oauth2": [
"crm.objects.custom.sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.custom.sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.custom.write"
]
},
{
"oauth2": [
"crm.objects.deals.highly_sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.deals.highly_sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.deals.read"
]
},
{
"oauth2": [
"crm.objects.deals.sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.deals.sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.deals.write"
]
},
{
"oauth2": [
"crm.objects.emails.read"
]
},
{
"oauth2": [
"crm.objects.feedback_submissions.read"
]
},
{
"oauth2": [
"crm.objects.goals.read"
]
},
{
"oauth2": [
"crm.objects.goals.write"
]
},
{
"oauth2": [
"crm.objects.invoices.read"
]
},
{
"oauth2": [
"crm.objects.invoices.write"
]
},
{
"oauth2": [
"crm.objects.leads.read"
]
},
{
"oauth2": [
"crm.objects.leads.write"
]
},
{
"oauth2": [
"crm.objects.line_items.read"
]
},
{
"oauth2": [
"crm.objects.line_items.write"
]
},
{
"oauth2": [
"crm.objects.listings.read"
]
},
{
"oauth2": [
"crm.objects.listings.write"
]
},
{
"oauth2": [
"crm.objects.marketing_events.read"
]
},
{
"oauth2": [
"crm.objects.marketing_events.write"
]
},
{
"oauth2": [
"crm.objects.meetings.read"
]
},
{
"oauth2": [
"crm.objects.notes.read"
]
},
{
"oauth2": [
"crm.objects.orders.read"
]
},
{
"oauth2": [
"crm.objects.owners.read"
]
},
{
"oauth2": [
"crm.objects.products.write"
]
},
{
"oauth2": [
"crm.objects.projects.highly_sensitive.read"
]
},
{
"oauth2": [
"crm.objects.projects.highly_sensitive.write"
]
},
{
"oauth2": [
"crm.objects.projects.read"
]
},
{
"oauth2": [
"crm.objects.projects.sensitive.read"
]
},
{
"oauth2": [
"crm.objects.projects.sensitive.write"
]
},
{
"oauth2": [
"crm.objects.projects.write"
]
},
{
"oauth2": [
"crm.objects.quotes.read"
]
},
{
"oauth2": [
"crm.objects.quotes.write"
]
},
{
"oauth2": [
"crm.objects.services.read"
]
},
{
"oauth2": [
"crm.objects.services.write"
]
},
{
"oauth2": [
"crm.objects.subscriptions.read"
]
},
{
"oauth2": [
"crm.objects.subscriptions.write"
]
},
{
"oauth2": [
"crm.objects.tasks.read"
]
},
{
"oauth2": [
"crm.objects.users.read"
]
},
{
"oauth2": [
"crm.pipelines.orders.read"
]
},
{
"oauth2": [
"crm.schemas.appointments.read"
]
},
{
"oauth2": [
"crm.schemas.calls.read"
]
},
{
"oauth2": [
"crm.schemas.carts.read"
]
},
{
"oauth2": [
"crm.schemas.commercepayments.read"
]
},
{
"oauth2": [
"crm.schemas.companies.read"
]
},
{
"oauth2": [
"crm.schemas.contacts.read"
]
},
{
"oauth2": [
"crm.schemas.courses.read"
]
},
{
"oauth2": [
"crm.schemas.custom.read"
]
},
{
"oauth2": [
"crm.schemas.deals.read"
]
},
{
"oauth2": [
"crm.schemas.emails.read"
]
},
{
"oauth2": [
"crm.schemas.invoices.read"
]
},
{
"oauth2": [
"crm.schemas.line_items.read"
]
},
{
"oauth2": [
"crm.schemas.listings.read"
]
},
{
"oauth2": [
"crm.schemas.meetings.read"
]
},
{
"oauth2": [
"crm.schemas.notes.read"
]
},
{
"oauth2": [
"crm.schemas.orders.read"
]
},
{
"oauth2": [
"crm.schemas.projects.read"
]
},
{
"oauth2": [
"crm.schemas.quotes.read"
]
},
{
"oauth2": [
"crm.schemas.services.read"
]
},
{
"oauth2": [
"crm.schemas.subscriptions.read"
]
},
{
"oauth2": [
"crm.schemas.tasks.read"
]
},
{
"oauth2": [
"e-commerce"
]
},
{
"oauth2": [
"media_bridge.read"
]
},
{
"oauth2": [
"tickets"
]
},
{
"oauth2": [
"tickets.highly_sensitive.v2"
]
},
{
"oauth2": [
"tickets.sensitive.v2"
]
},
{
"oauth2": [
"timeline"
]
}
],
"path": "GET /crm/v3/pipelines/{objectType}/{pipelineId}/stages",
"previous_value": [
{
"oauth2": [
"automation"
]
},
{
"oauth2": [
"crm.objects.appointments.read"
]
},
{
"oauth2": [
"crm.objects.appointments.sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.appointments.sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.appointments.write"
]
},
{
"oauth2": [
"crm.objects.calls.read"
]
},
{
"oauth2": [
"crm.objects.carts.read"
]
},
{
"oauth2": [
"crm.objects.commercepayments.write"
]
},
{
"oauth2": [
"crm.objects.companies.highly_sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.companies.highly_sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.companies.read"
]
},
{
"oauth2": [
"crm.objects.companies.sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.companies.sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.companies.write"
]
},
{
"oauth2": [
"crm.objects.contacts.highly_sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.contacts.highly_sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.contacts.read"
]
},
{
"oauth2": [
"crm.objects.contacts.sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.contacts.sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.contacts.write"
]
},
{
"oauth2": [
"crm.objects.courses.read"
]
},
{
"oauth2": [
"crm.objects.courses.write"
]
},
{
"oauth2": [
"crm.objects.custom.highly_sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.custom.highly_sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.custom.read"
]
},
{
"oauth2": [
"crm.objects.custom.sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.custom.sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.custom.write"
]
},
{
"oauth2": [
"crm.objects.deals.highly_sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.deals.highly_sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.deals.read"
]
},
{
"oauth2": [
"crm.objects.deals.sensitive.read.v2"
]
},
{
"oauth2": [
"crm.objects.deals.sensitive.write.v2"
]
},
{
"oauth2": [
"crm.objects.deals.write"
]
},
{
"oauth2": [
"crm.objects.emails.read"
]
},
{
"oauth2": [
"crm.objects.feedback_submissions.read"
]
},
{
"oauth2": [
"crm.objects.goals.read"
]
},
{
"oauth2": [
"crm.objects.goals.write"
]
},
{
"oauth2": [
"crm.objects.invoices.read"
]
},
{
"oauth2": [
"crm.objects.invoices.write"
]
},
{
"oauth2": [
"crm.objects.leads.read"
]
},
{
"oauth2": [
"crm.objects.leads.write"
]
},
{
"oauth2": [
"crm.objects.line_items.read"
]
},
{
"oauth2": [
"crm.objects.line_items.write"
]
},
{
"oauth2": [
"crm.objects.listings.read"
]
},
{
"oauth2": [
"crm.objects.listings.write"
]
},
{
"oauth2": [
"crm.objects.marketing_events.read"
]
},
{
"oauth2": [
"crm.objects.marketing_events.write"
]
},
{
"oauth2": [
"crm.objects.meetings.read"
]
},
{
"oauth2": [
"crm.objects.notes.read"
]
},
{
"oauth2": [
"crm.objects.orders.read"
]
},
{
"oauth2": [
"crm.objects.owners.read"
]
},
{
"oauth2": [
"crm.objects.products.write"
]
},
{
"oauth2": [
"crm.objects.projects.highly_sensitive.read"
]
},
{
"oauth2": [
"crm.objects.projects.highly_sensitive.write"
]
},
{
"oauth2": [
"crm.objects.projects.read"
]
},
{
"oauth2": [
"crm.objects.projects.sensitive.read"
]
},
{
"oauth2": [
"crm.objects.projects.sensitive.write"
]
},
{
"oauth2": [
"crm.objects.projects.write"
]
},
{
"oauth2": [
"crm.objects.quotes.read"
]
},
{
"oauth2": [
"crm.objects.quotes.write"
]
},
{
"oauth2": [
"crm.objects.services.read"
]
},
{
"oauth2": [
"crm.objects.services.write"
]
},
{
"oauth2": [
"crm.objects.subscriptions.read"
]
},
{
"oauth2": [
"crm.objects.subscriptions.write"
]
},
{
"oauth2": [
"crm.objects.tasks.read"
]
},
{
"oauth2": [
"crm.objects.users.read"
]
},
{
"oauth2": [
"crm.pipelines.orders.read"
]
},
{
"oauth2": [
"crm.schemas.appointments.read"
]
},
{
"oauth2": [
"crm.schemas.calls.read"
]
},
{
"oauth2": [
"crm.schemas.carts.read"
]
},
{
"oauth2": [
"crm.schemas.commercepayments.read"
]
},
{
"oauth2": [
"crm.schemas.companies.read"
]
},
{
"oauth2": [
"crm.schemas.contacts.read"
]
},
{
"oauth2": [
"crm.schemas.courses.read"
]
},
{
"oauth2": [
"crm.schemas.custom.read"
]
},
{
"oauth2": [
"crm.schemas.deals.read"
]
},
{
"oauth2": [
"crm.schemas.emails.read"
]
},
{
"oauth2": [
"crm.schemas.invoices.read"
]
},
{
"oauth2": [
"crm.schemas.line_items.read"
]
},
{
"oauth2": [
"crm.schemas.listings.read"
]
},
{
"oauth2": [
"crm.schemas.meetings.read"
]
},
{
"oauth2": [
"crm.schemas.notes.read"
]
},
{
"oauth2": [
"crm.schemas.orders.read"
]
},
{
"oauth2": [
"crm.schemas.projects.read"
]
},
{
"oauth2": [
"crm.schemas.quotes.read"
]
},
{
"oauth2": [
"crm.schemas.services.read"
]
},
{
"oauth2": [
"crm.schemas.subscriptions.read"
]
},
{
"oauth2": [
"crm.schemas.tasks.read"
]
},
{
"oauth2": [
"e-commerce"
]
},
{
"oauth2": [
"media_bridge.read"
]
},
{
"oauth2": [
"tickets"
]
},
{
"oauth2": [
"tickets.highly_sensitive.v2"
]
},
{
"oauth2": [
"tickets.sensitive.v2"
]
},
{
"oauth2": [
"timeline"
]
}
]
}Likely impact
The contract still holds, but observable behavior shifted — defaults, response timing, or rate-limit shaping. Existing code keeps compiling and most calls keep working, but edge cases may differ. Worth a sanity check.
Recommended action
Re-check your auth setup against the provider's current docs. Auth changes typically require config updates, not code changes.
Related changes
Other endpoints affected by the same root cause.
Catch changes like this on every API you depend on.
Intello monitors 100+ APIs and tells you the moment something changes — before it breaks production.