Set up a PlanetScale connector

C1 provides identity governance for PlanetScale. Integrate your PlanetScale organization with C1 for unified visibility and governance over user access.

C1 provides identity governance for PlanetScale. Integrate your PlanetScale organization with C1 for unified visibility and governance over user access.

Capabilities

Resource	Sync	Provision
Users
Teams

Gather PlanetScale credentials

Create the service token as an organization administrator so it can be granted organization-wide read access. The connector is read-only and needs the read_organization access grant.

1. In PlanetScale, open Organization settings > Service tokens.

2. Create a service token. PlanetScale shows a token ID and a token value — copy both. The value is shown only once.

3. Grant the service token the read_organization access on the organizations you want C1 to govern.

4. Combine the two halves into a single colon-joined string, <token-id>:<token-value>. This is the value you enter for the service token field below.

Configuration fields

Field	Required	Description
planetscale-service-token	Yes	The service token as the colon-joined pair <token-id>:<token-value>.
planetscale-api-url	Yes	Base URL for the PlanetScale API. Use https://api.planetscale.com for the standard cloud.

Synced resource types

• Organizations: every organization the service token can reach. The member and admin organization roles are modeled as entitlements on the organization.
• Users: organization members, projected as user principals.
• Teams: organization teams, with team membership as grants.

Special notes

• Provisioning is not supported in the current build; the connector is read-only.
• The service token’s organization access determines what is synced. A token scoped to one organization syncs that organization; a token with access to several syncs all of them.

Configure the PlanetScale connector

Cloud-hosted

Follow these instructions to use a built-in, no-code connector hosted by C1.

1. In C1, navigate to Integrations > Connectors and click Add connector.

2. Search for PlanetScale and click Add.

3. Choose how to set up the new PlanetScale connector.

4. Set the owner for this connector.

5. Click Next.

6. Find the Settings area of the page and click Edit.

7. Enter the PlanetScale credentials:

   • Service token (id:token): The colon-joined <token-id>:<token-value> pair.
   • API URL: https://api.planetscale.com (or your proxy/sovereign host).
8. Click Save.

9. The connector’s label changes to Syncing, followed by Connected. You can view the logs to ensure that information is syncing.

Done. Your PlanetScale connector is now pulling access data into C1.

Self-hosted

Follow these instructions to run the PlanetScale connector in your own environment.

1. In C1, navigate to Integrations > Connectors and click Add connector.

2. Search for Baton and click Add, then set the owner and click Next.

3. Configure C1 credentials and PlanetScale credentials as environment variables:

   BATON_CLIENT_ID=<C1 client ID>
   BATON_CLIENT_SECRET=<C1 client secret>
   BATON_HOST_ID=baton-planetscale
   BATON_PLANETSCALE_SERVICE_TOKEN=<token-id>:<token-value>
   BATON_PLANETSCALE_API_URL=https://api.planetscale.com
   
4. Deploy the connector using your standard self-hosted connector process.

Done. Your PlanetScale connector is now pulling access data into C1.