> ## Documentation Index
> Fetch the complete documentation index at: https://conductorone-docs-mcp-bridge-private-server.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up a LangSmith connector

> C1 provides identity governance and just-in-time provisioning for LangSmith. Integrate your LangSmith instance with C1 to run user access reviews (UARs), enable just-in-time access requests, and automatically provision and deprovision access.

## Capabilities

| Resource           | Sync                                                          | Provision                                                     |
| ------------------ | ------------------------------------------------------------- | ------------------------------------------------------------- |
| Users              | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |                                                               |
| Workspaces         | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |                                                               |
| Organization roles | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |                                                               |
| Workspace roles    | <Icon icon="square-check" iconType="solid" color="#c937ae" /> | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |

## Gather LangSmith credentials

<Warning>
  Use an organization-scoped LangSmith service key (`lsv2_sk_...`), not a
  personal access token (`lsv2_pt_...`) or workspace-scoped key. C1 recommends a
  service key with the Organization Admin role.
</Warning>

<Steps>
  <Step>
    In LangSmith, open **Settings** > **API Keys**.
  </Step>

  <Step>
    Create or select an organization-scoped service key. Grant Organization
    Admin, or grant `organization:read`, `workspaces:read`, and
    `workspaces:manage-members`.
  </Step>

  <Step>
    Copy the service key.
  </Step>

  <Step>
    Open **Settings** > **Organization** and copy the organization UUID.
  </Step>
</Steps>

## Configuration fields

| Field             | Required | Description                                                               |
| ----------------- | -------- | ------------------------------------------------------------------------- |
| `api-key`         | Yes      | Organization-scoped LangSmith service key.                                |
| `organization-id` | Yes      | LangSmith organization UUID sent as `X-Organization-Id` on every request. |

## Synced resource types

* **Users**: active organization members.
* **Workspaces**: non-deleted, non-personal workspaces in the organization.
* **Organization roles**: organization-scoped role definitions and read-only
  assignments.
* **Workspace roles**: workspace-scoped role definitions per workspace and
  workspace role assignment grants.

## Special notes

* Workspace role grants can be added and revoked from C1.
* Organization role grants are read-only because LangSmith replaces the single
  organization role on update rather than adding or removing independent
  grants.
* A user must already be a LangSmith organization member before C1 can assign
  the user to a workspace role.
* Personal and deleted workspaces are filtered out during sync.
* The connector targets LangSmith Cloud.

## Configure the LangSmith connector

<Tabs>
  <Tab title="Cloud-hosted">
    Follow these instructions to use a built-in, no-code connector hosted by C1.

    <Steps>
      <Step>
        In C1, navigate to **Integrations** > **Connectors** and click **Add connector**.
      </Step>

      <Step>
        Search for **LangSmith** and click **Add**.
      </Step>

      <Step>
        Choose how to set up the new LangSmith connector.
      </Step>

      <Step>
        Set the owner for this connector.
      </Step>

      <Step>
        Click **Next**.
      </Step>

      <Step>
        Find the **Settings** area of the page and click **Edit**.
      </Step>

      <Step>
        Paste the LangSmith credentials into the relevant fields:

        * **LangSmith service key**: The organization-scoped service key.
        * **Organization ID**: The LangSmith organization UUID.
      </Step>

      <Step>
        Click **Save**.
      </Step>

      <Step>
        The connector's label changes to **Syncing**, followed by
        **Connected**. You can view the logs to ensure that information is
        syncing.
      </Step>
    </Steps>

    **Done.** Your LangSmith connector is now pulling access data into C1.
  </Tab>

  <Tab title="Self-hosted">
    Follow these instructions to run the LangSmith connector in your own
    environment.

    <Steps>
      <Step>
        In C1, navigate to **Integrations** > **Connectors** and click **Add connector**.
      </Step>

      <Step>
        Search for **Baton** and click **Add**.
      </Step>

      <Step>
        Choose how to set up the new LangSmith connector, set the owner, and
        click **Next**.
      </Step>

      <Step>
        In the **Settings** area, click **Edit**, then click **Rotate** to
        generate a new Client ID and Client Secret. Store these values
        securely for your deployment.
      </Step>

      <Step>
        Configure C1 credentials and LangSmith credentials as environment
        variables:

        ```bash theme={"theme":{"light":"css-variables","dark":"css-variables"}}
        BATON_CLIENT_ID=<C1 client ID>
        BATON_CLIENT_SECRET=<C1 client secret>
        BATON_HOST_ID=baton-langsmith
        BATON_API_KEY=<LangSmith organization-scoped service key>
        BATON_ORGANIZATION_ID=<LangSmith organization UUID>
        ```
      </Step>

      <Step>
        Deploy the connector using the Public ECR image:

        ```bash theme={"theme":{"light":"css-variables","dark":"css-variables"}}
        public.ecr.aws/conductorone/baton-langsmith:<version>
        ```

        Use a version tag without the leading `v`, such as `0.0.3`.
      </Step>
    </Steps>

    **Done.** Your LangSmith connector is now pulling access data into C1.
  </Tab>
</Tabs>