Hack The Box

Record your Hack The Box connection as cloud storage provider evidence. Automated collection is not available for this provider yet.

Connect with an API token

1. In Hack The Box:

   1. Sign in to the HTB Enterprise Platform with the account the key will belong to (use a Member account for read-only, content-limited access; Admin accounts can call every endpoint, including user and space management).
   2. Click My Profile and select Settings.
   3. Scroll to the API Key section and click + Create API Key.
   4. In the modal, enter a name for the key (optional but recommended) and click Create API Key.
   5. Copy the key from the new modal with the copy icon. This is the only time the full API key is shown.

   Where to find the other values:

   • Base URL (optional): HTB documents the Enterprise Public API in its Developer Portal at https://enterprise.hackthebox.com/developers/portal#overview; the help articles do not state the API base URL.

   Hack The Box shows the secret only once, so copy it before you leave the page.

   Applies to the HTB Enterprise Platform (business); the key must belong to a user provisioned on that platform. There is no scope choice at creation: the key carries its owner's role. Members can reach read-only or limited content endpoints; User Management endpoints are Admins only. Keys expire automatically two years after creation, at most 10 keys can be active at once, rate limits are shared across all of an account's keys, and deleting a key invalidates it immediately. The separate HTB CTF platform issues an MCP token under Profile Settings › MCP Access › Generate Token (also shown once). Where the organization identifier is shown is not documented.

   Source: enterprise-help.hackthebox.com, enterprise-help.hackthebox.com, checked 2026-10-07.

2. On Compliance › Connectors, open Hack The Box, click Connect, choose API token and fill in:

   Field	What to enter
   API token / Personal access token	Required. Stored encrypted and never shown again.
   Base URL (optional)	—
   Account / Org / Workspace (optional)	—

3. Click Connect with token.

Frameworks

No automated compliance test reads Hack The Box yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.

Related

• Cloud Storage Provider connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks