Skip to main content
Only an Owner, Admin, IT admin or Network admin can generate an API access token. The token has the same permissions as the user who generates it, and Tailscale offers no scopes to narrow it, so it can also change users. The OAuth 2.0 option limits access with scopes. The IT admin role is available on the Standard, Premium and Enterprise plans.

​
Generate the API access token

An API access token, sometimes called an API key, carries the permissions of the user who generates it.

1

Sign in to Tailscale

Sign in to your Tailscale admin console as an IT admin.

  • IT admin is the smallest role that covers this connector. It reads users and the policy file and manages users, invitations and devices. It cannot change the policy file, DNS or billing.
  • If your plan has no IT admin role, sign in as an Admin.
  • Do not use a Network admin. Tailscale lets only an Owner, Admin or IT admin manage invitations, and the connection test lists pending invitations.
  • Open the Keys page.
2

Generate the token

In the API access tokens section, select Generate access token.

  • Choose the number of days before the token expires, from 1 to 90.
  • When the token expires, the connection stops working until you paste a new token into StackOne Hub. Set a reminder to replace it before then.
3

Copy the token

Copy the token and store it securely for use later.

  • Tailscale says secrets are only displayed once in their entirety. If you do not copy it, generate a new token.
  • The token starts with tskey-api and is case-sensitive.
  • Paste it into the API Access Token field in StackOne Hub.

​
Revoke the token

To stop StackOne from reading your tailnet before the token expires, revoke it.

  • Open the Keys page and go to the API access tokens section.
  • Select Revoke next to the token.
  • Recently expired and revoked tokens stay listed on the Keys page.

​
Linking the Account from the Hub

1

Navigate to the Hub

Use one of the three Linking Account Methods to access the Hub.
2

Fill out the fields

Fill out the following fields using details from your provider:
  • API Access Token
3

Connect

  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account on your Accounts page.