How we work in your GoHighLevel account
Short answer
You add us as a user in your own HighLevel account, and we set everything up logged in as that user; you can remove us any time. If something we set up needs to link HighLevel to your other software, you also create a Private Integration Token with only the access it needs, and you can rotate or delete it whenever you like. HighLevel's API help article says these tokens are available on every plan.
The user you add
In your sub-account, go to Settings > My Staff and add a user for us, with the role we agree on the call. We build everything as that user, in your account, so nothing is set up somewhere you can't see.
We never ask for your own password. When the work is done, you can lower the user's role or remove it.
Which HighLevel plan you need
HighLevel's API help article, updated November 2, 2026, says Private Integration Tokens and the standard API endpoints are available on every plan: Starter, Unlimited and the agency plan. The only endpoints it reserves for the top agency plan are for creating sub-accounts and SaaS settings, which a single business's account doesn't need.
The same article's FAQ, and HighLevel's pricing page, still describe "basic API access" by plan, so we check what your account can do on the first call, before anything is built.
If you don't see Private Integrations in your settings, HighLevel's help center says to turn the feature on in Labs. If an agency runs your HighLevel account for you, ask them.
Create the token, step by step
- Open Private Integrations. In your sub-account, go to Settings and scroll to Other Settings in the left menu, then open Private Integrations. By default, account admins can create them.
- Create a new integration. Name it so you'll recognize it later, for example "Midwater connection", and add a short description.
- Choose the scopes. Tick only what the job needs. We send you the exact list before you start (the table below shows the usual ones). You can change scopes later without a new token.
- Copy the token. HighLevel shows it once. Copy it straight away.
- Share it securely. We send you a secure link for it. Never send a token by email or text.
- Rotate it, or delete it. HighLevel recommends rotating every 90 days. When you rotate, the old and new tokens both work for 7 days. If a token is ever exposed, use "Rotate and expire this token now". To end access, delete the integration from its ⋮ menu.
To limit who can create tokens, HighLevel's path is Settings > My Staff > edit the admin > Roles & Permissions.
The scopes a connection usually needs
Scope names exactly as HighLevel's developer docs list them. A token gets only the ones its job uses.
| Job | Scopes |
|---|---|
| Find, create and update contacts, tags and notes | contacts.readonly, contacts.write |
| Read conversations and send texts and email | conversations.readonly, conversations/message.readonly, conversations/message.write |
| Check availability and book appointments | calendars.readonly, calendars/events.readonly, calendars/events.write |
| Create opportunities and move them between stages | opportunities.readonly, opportunities.write |
| See your workflows and add contacts to them | workflows.readonly, contacts.write |
| Create and send HighLevel invoices | invoices.readonly, invoices.write |
| Read your account's details and users | locations.readonly, users.readonly |
What a token can and can't do through the API
| Area | Can | Can't |
|---|---|---|
| Contacts | Search, create and update contacts, tags, notes and tasks | See anything outside the scopes you chose |
| Texts and email | Send from your own HighLevel numbers and email, into the same conversation | Text from a number that isn't A2P 10DLC registered or toll-free verified |
| Calendars | Book appointments and block time on your HighLevel calendars | Change another user's Google or Outlook connection |
| Pipelines | Create opportunities, move stages, mark won or lost | Change your pipeline setup |
| Workflows | List them, and add or remove a contact | Build or edit workflows. HighLevel's Workflows API is in a private beta, so when we set up your account we build them in HighLevel ourselves, logged in as a user you add |
| Reviews | Add a contact to your workflow that sends a review request | Send review requests directly; we found no review-request endpoint in HighLevel's API |
| Invoices | Create and send HighLevel invoices, after your yes | Take or move money |
How a connection hears about new calls, messages and bookings
Either a Webhook step in a workflow (for example, on Customer Replied or Opportunity Status Changed) passes it on the moment it happens, or the connection checks your account every few minutes. HighLevel bills some webhook steps as premium workflow actions, so we pick the one that fits your account.
HighLevel's developer docs describe webhook subscriptions for Marketplace apps, not private tokens. We don't use a Marketplace app; the connection is the token you create.
Limits
HighLevel allows 100 API requests every 10 seconds and 200,000 a day per sub-account. A connection working for one business stays far under that.
Common questions
- Can I see what you changed?
- Yes. Everything we build is in your own account, texts and emails sent through a connection are in Conversations, and we write down every change we make for you.
- What happens if I delete the token?
- Whatever used it can't reach your HighLevel account any more. Nothing else in your account changes.
- Do you log in as me?
- No. We never use your password: we work as the user you add, and connections use the token you create.
- Can it work in more than one sub-account?
- Yes, with a token from each one. A token only reaches the sub-account it was created in.
Want GoHighLevel set up and running for you?
Book a free 15-minute call. Tell us what you sell and where your leads come from, new account or the one you have, and we'll tell you what we'd set up, how long it takes and what it costs.