Skip to main content
Creating account-level API keys requires administrator access to your JupiterOne account.

Find your Account ID

The Account ID identifies your JupiterOne tenant and is sent on every API request.

  • Sign in to JupiterOne.
  • Navigate to Settings > Account Management.
  • Copy the Account ID value.

Create an API key

API keys authenticate requests to the JupiterOne GraphQL and REST APIs.

1

Open Account Management

Navigate to Settings > Account Management in the JupiterOne console.

2

Create the key

Create a new API key and give it a descriptive name, for example StackOne.

3

Choose the permission policy

JupiterOne attaches a JSON permission policy to each key. Grant the actions this
integration needs.

  • query:ReadGraphData — required for J1QL queries and all graph reads.
  • query:GetAccountEntity — required to read account entities.
  • persister:Synchronize — required only for bulk sync jobs.
  • persister:GetEntityRawData — required to read raw entity data.
  • settings:GetSettings, dashboard:View, compliance:GetStandard, compliance:GetSummary — grant as needed.
4

Copy the key

Copy the key immediately. JupiterOne shows it only once.

Linking the Account from the Hub

1

Navigate to the Hub

Use one of the three Linking Account Methods to access the Hub.
2

Fill out the fields

Fill out the following fields using details from your provider:
  • Account ID
  • API Key
3

Connect

  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account in your Accounts page.