> ## Documentation Index
> Fetch the complete documentation index at: https://conductorone-docs-mcp-bridge-private-server.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up a Runlayer connector

> C1 provides identity governance for Runlayer. Integrate your Runlayer instance with C1 for unified visibility and governance over user access and platform roles.

C1 provides identity governance for Runlayer. Integrate your Runlayer instance
with C1 for unified visibility and governance over who can administer your MCP
platform.

## Capabilities

| Resource | Sync                                                          | Provision |
| -------- | ------------------------------------------------------------- | --------- |
| Users    | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |
| Roles    | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |

This connector is **read-only**: it syncs Runlayer users, the platform's
fine-grained access (FGA) roles, and each user's role assignments. It does not
provision changes back to Runlayer.

## Gather Runlayer credentials

<Warning>
  Runlayer is tenant-scoped. You connect to your own hosted or self-hosted
  Runlayer instance, not a shared public endpoint.
</Warning>

<Steps>
  <Step>
    Sign in to your Runlayer instance as a user whose role can read user and
    role information, such as Super Admin, Security Admin, or Helpdesk.
  </Step>

  <Step>
    Open **Settings** > **Personal API keys** and create a new key. Copy the
    key value — it is sent in the `x-runlayer-api-key` header and is shown only
    once.
  </Step>

  <Step>
    Note your instance's API base URL. It is your Runlayer origin with the
    `/api/v1` path, for example `https://your-tenant.runlayer.com/api/v1`.
  </Step>
</Steps>

## Configure the Runlayer connector

<Tabs>
  <Tab title="Cloud-hosted">
    Follow these instructions to use a built-in, no-code connector hosted by C1.

    <Steps>
      <Step>
        In C1, navigate to **Integrations** > **Connectors** and click **Add connector**.
      </Step>

      <Step>
        Search for **Runlayer** and click **Add**.
      </Step>

      <Step>
        Choose how to set up the new Runlayer connector.
      </Step>

      <Step>
        Set the owner for this connector.
      </Step>

      <Step>
        Click **Next**.
      </Step>

      <Step>
        Find the **Settings** area of the page and click **Edit**.
      </Step>

      <Step>
        Enter the Runlayer credentials:

        * **Base URL**: your instance Management API URL, for example `https://your-tenant.runlayer.com/api/v1`.
        * **API key**: the personal API key from your Runlayer instance.
      </Step>

      <Step>
        Click **Save**.
      </Step>

      <Step>
        The connector's label changes to **Syncing**, followed by **Connected**. You can view the logs to ensure that information is syncing.
      </Step>
    </Steps>

    **Done.** Your Runlayer connector is now pulling access data into C1.
  </Tab>

  <Tab title="Self-hosted">
    Follow these instructions to run the Runlayer connector in your own
    environment.

    <Steps>
      <Step>
        Create a secret for the Runlayer personal API key.
      </Step>

      <Step>
        Configure the connector with your instance base URL and the API key
        secret.
      </Step>

      <Step>
        Deploy the connector using your standard self-hosted connector process.
      </Step>
    </Steps>

    **Done.** Your Runlayer connector is now pulling access data into C1.
  </Tab>
</Tabs>