---
title: "Exchange a CRM OAuth code and store encrypted credentials"
method: POST
path: "/api/integrations/crm/oauth/callback"
tags: ["CRM"]
---

# Exchange a CRM OAuth code and store encrypted credentials

`POST /api/integrations/crm/oauth/callback`

## Request

- Base URL: `https://api.setluca.com`
- URL: `https://api.setluca.com/api/integrations/crm/oauth/callback`
- Auth: one of:
  - API key in cookie `luca.session_token`
  - API key in header `x-api-key`
  - HTTP bearer

Exchanges the OAuth code for tokens and stores them encrypted against this workspace. The code only works once.

**API key scopes:** `integrations:write`. You also need an `Idempotency-Key` header.

## Headers

- `Luca-API-Version` '1'

## Request body

- CrmOAuthCallback
  - `provider` 'gohighlevel' | 'hubspot' | 'activecampaign' | 'salesforce' | 'pipedrive', required
  - `code` string, required
  - `state` string, required
  - `redirectUri` string, uri

## Response `200`

ok

- CrmConnection
  - `id` string, uuid, required
  - `provider` 'gohighlevel' | 'hubspot' | 'activecampaign' | 'salesforce' | 'pipedrive', required
  - `status` 'connected' | 'needs_auth' | 'paused' | 'disabled', required
  - `capabilityFlags` object, required
    - `tags` boolean, required
    - `customFields` boolean, required
    - `deals` boolean, required
    - `pipelines` boolean, required
    - `calendar` boolean, required
    - `webhooks` boolean, required
    - `ownerAssignment` boolean, required
    - `bidirectionalSync` boolean, required
  - `settings` object, required: Opaque JSON object
  - `healthStatus` string, required
  - `lastHealthCheckAt` string, nullable, required
  - `connectedAt` string, required
  - `createdAt` string, required
  - `updatedAt` string, required

## Other responses

- `400`: bad request
- `401`: unauthorized
- `403`: forbidden
- `409`: conflict
- `429`: rate limited
- `500`: internal error
- `502`: upstream failure

---

[API](https://skmtc.dev/setluca/apis/luca-api.md) · [All operations](https://skmtc.dev/setluca/apis/luca-api/llms.txt) · [OpenAPI document](https://skmtc.dev/setluca/apis/luca-api/revisions/90a200e4100b?raw)