Skip to main content
Snyk REST API access requires an Enterprise plan — on Free and Team plans this token authenticates only the CLI, IDE, and CI/CD integrations, not the API. The Auth Token authorizes API calls with the permissions of its owner, and only authenticates against the region it was created in, so it must match the region you select. Listing people needs a Group-level role with the View Group Memberships and View Organizations permissions. Snyk’s pre-defined roles table does not say which Group roles hold View Group Memberships. Group Viewer is read-only; if StackOne reports a 403, use Group Admin. Snyk’s API reference says the role list needs read access to the Group. A token with only Organization roles cannot read them.

​
Find your Snyk region

Snyk hosts accounts in several regional data centers, and a token only works against
its own region. Your region is shown in your browser’s address bar whenever you are
signed in to Snyk — it is the host in the URL, the part between https:// and the first
/. Match that host to the Region you select below.

  • Sign in to Snyk and look at your browser’s address bar.
  • Example: if the address bar shows https://app.snyk.io/..., the host is app.snyk.io — choose US (SNYK-US-01) — api.snyk.io.
  • app.snyk.io → US (SNYK-US-01) — api.snyk.io
  • app.us.snyk.io → US (SNYK-US-02) — api.us.snyk.io
  • app.eu.snyk.io → EU (SNYK-EU-01) — api.eu.snyk.io
  • app.au.snyk.io → AU (SNYK-AU-01) — api.au.snyk.io

​
Find your Auth Token

Your Auth Token is the token that authenticates every REST API request.

1

Sign in to Snyk

Sign in to your Snyk account with a user that has the access you want the integration to have.

2

Open Account settings

Snyk has no Account settings item in the main sidebar — you open it from your profile menu at the bottom of the left sidebar.

  • At the bottom of the left sidebar, click your profile name to open the account menu.
  • In the account menu, click Account settings.
  • On the Account settings page, open the General page — this is where your token is shown.
  • As a shortcut, go straight to the Account general settings page to skip the menu.
3

Copy the Auth Token value

On the General page, find the Auth Token section.

  • Under KEY, click click to show to reveal the token.
  • Highlight and copy the token, then store it securely for use later.
  • To rotate it later, click Revoke & Regenerate — this makes the previous token invalid.
  • You provide this token together with the matching Region you identified above.
The Snyk Account General settings page showing the Auth Token section with the KEY field and the Revoke & Regenerate button highlighted.

Snyk recommends a service account for automation. A Group service account token goes in the
Auth Token field, does not depend on one employee’s account, and can be read-only.

1

Open the Group's service accounts

To create a Group service account, you must be a Group admin.

  • Log in to your account and navigate to the Group.
  • Click Settings > Service accounts.
  • Click Create a service account.
2

Name it and choose a role

Enter a unique name in the Service Account name field, then pick a role from the Role dropdown.

  • Group Viewer enables read-only access. Snyk’s pre-defined roles table does not say whether it holds View Group Memberships, which listing people needs, so try it first.
  • Group Admin enables full administrator access, including create, edit and delete rights. Choose it if StackOne reports a 403 when it lists people.
3

Copy the token

Click Create. The token is shown once, so copy it now and paste it into the Auth Token field together with your Region.

​
Find your Group ID

StackOne lists the people of one Snyk Group. If your token sees only one Group you can leave the Group ID field empty; if it sees several, enter the one to read. If you use a Group service account token, enter the Group ID.

1

Copy your Group ID

Open your Group’s Settings > General page and find Group ID, which Snyk describes as “View and copy the unique ID for this Group.” Paste the value into the Group ID field in StackOne Hub.

​
Find your Organization ID

If you plan to enable webhook events, StackOne needs your Snyk Organization ID to provision the webhook subscription. It is not required for any other actions.

1

Copy your Organization ID

Open your organization’s Settings page and select General, then scroll to the Organization ID section and click Copy. Paste the value into the Organization ID field in StackOne Hub.

  • The Organization ID is a UUID that uniquely identifies your organization.
  • As a shortcut, open the General settings page at the /manage/settings path for your organization and scroll to the Organization ID section.
The Snyk organization General settings page with the Organization ID section and its Copy button highlighted.
1

Connect

  • Click Connect.
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup.
2

Use Actions

Connect an AI platform to the linked account’s actions. See AI Platforms.Other ways to call actions are listed in Protocols & SDKs.

​
Next Steps

Webhooks setup

Configure receiving Events for Snyk into StackOne.