MCP
A2AChoosing Your Environment
Deel provides separate environments for development and production. Each requires its own OAuth app registration.
Select the right environment
When connecting Deel to StackOne, you will be asked to select an environment.
- Production — Uses your live Deel organization at
app.deel.com - Sandbox — Uses simulated data for testing at
app.demo.deel.com - You must create a separate OAuth app in each environment
- Client ID and Client Secret are different per environment
Create an OAuth App
Register an OAuth application in the Deel Developer Center to enable user-authorized API access.
Open the Developer Center
Sign in to the Deel account for your target environment and navigate to the Developer Center.
- Production — Sign in at app.deel.com. Click More in the top navigation bar, then select Developer from the products and services grid. Click the Apps tab.
- Sandbox — Sign in at app.demo.deel.com. Click the Settings icon (gear) in the top bar, then scroll to the Services section in the left sidebar and click Developer > Apps.
Register a new app
Click Create new app and complete the registration form.
- Select Organization as the app type (recommended)
- Enter a descriptive app name (e.g., “StackOne Integration”)
- Set the Redirect URL to
https://api.stackone.com/connect/oauth2/deel/callback - Add a description for the app
- Optionally upload an app icon (.PNG format, max 1MB)
- Click Create
Copy and store credentials
After creation, copy the Client ID and Client Secret immediately.
- Copy the key — this is your Client ID
- Copy the secret — this is your Client Secret
- Critical — The secret is shown only once. Store it securely for use later
Matching Credentials to Environment
Ensure your OAuth credentials match the environment you selected in StackOne.
- If you selected Production, use the Client ID and Secret from
app.deel.com - If you selected Sandbox, use the Client ID and Secret from
app.demo.deel.com - Using credentials from the wrong environment will cause authentication errors
Important Notes
Key information about Deel OAuth 2.0 authentication.
- Access tokens expire after 30 days
- Refresh tokens expire after 90 days and are single-use
- Each refresh invalidates the previous refresh token — always store the new one
- Reusing an already-exchanged refresh token may trigger revocation of all tokens
Creating the StackOne Connector Profile
To create the Connector Profile in StackOne for Deel:Navigate to Connector Profiles
Create New Connector Profile
- Click + Connector Profile
- Search for and select Deel
- Select Type as OAuth 2.0
- Fill out the fields using details retrieved from your provider:
- Client ID
- Client Secret
- Scopes (Optional)
- (Optional) Select Actions to be enabled for this Connector Profile
- Click Create profile