Snyk OAuth 2.0 (Service Account) connector profile – StackOne setup guide

Service accounts using OAuth 2.0 require an Enterprise plan and are created via the Snyk API, using an existing Auth Token or Personal Access Token with permission to manage service accounts.

Find your Snyk region

Snyk hosts accounts in several regional data centers, and a service account only
authenticates against its own region. Your region is shown in your browser’s address
bar whenever you are signed in to Snyk — it is the host in the URL, the part between
https:// and the first /. Match that host to the Region you select below.

Sign in to Snyk and look at your browser’s address bar.
app.snyk.io → US (SNYK-US-01) — api.snyk.io
app.us.snyk.io → US (SNYK-US-02) — api.us.snyk.io
app.eu.snyk.io → EU (SNYK-EU-01) — api.eu.snyk.io
app.au.snyk.io → AU (SNYK-AU-01) — api.au.snyk.io

Create a service account

Create the service account at the Group or Organization level, using an Auth Token or
Personal Access Token you already have.

Create the service account

Send a request to create the service account, replacing <group_or_org_id>,
<your-region-api-host>, <your_token>, and <role_id> with your Group or
Organization ID, region API host, existing token, and the role to assign:

curl -X POST 'https://<your-region-api-host>/rest/groups/<group_or_org_id>/service_accounts?version=2026-03-25' \
  -H 'Authorization: token <your_token>' \
  -H 'Content-Type: application/vnd.api+json' \
  -d '{
    "data": {
      "attributes": {
        "name": "StackOne Integration",
        "auth_type": "oauth_client_credentials",
        "role_id": "<role_id>"
      }
    }
  }'

name — a descriptive name for the service account, such as StackOne Integration.
auth_type — must be oauth_client_credentials to get a Client ID and Client Secret instead of a legacy API key.
role_id — the role to assign. This determines everything the token can do; Snyk documents no separate OAuth scopes for service accounts.

Copy the Client ID and Client Secret

The response returns the service account’s credentials under data.attributes.

Copy the Client ID (client_id in the response) into your Connector Profile.
Copy the Client Secret (client_secret in the response) into your Connector Profile — it is returned only once and cannot be retrieved later.

Create the StackOne Connector Profile

Create a Connector Profile

Enable the connector and create a Connector Profile in your project. See Setup Connector Profile.

Link an Account

Once the Connector Profile is created, continue to link an account.

​Find your Snyk region

​Create a service account

​Create the StackOne Connector Profile

Find your Snyk region

Create a service account

Create the StackOne Connector Profile