Safeguard Docs
Compliance ConnectorsSetup by categoryInfrastructure

Sentinel

Connect Sentinel to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.

Record your Sentinel connection as infrastructure evidence. Automated collection is not available for this provider yet.

CategoryInfrastructure
Connect withAPI token
What a connection producesConnection record

Connect with an API token

  1. In Sentinel:

    1. Sentinel itself issues no API token; it is the policy-as-code tool for HashiCorp products such as Terraform. To share Sentinel policy evidence from HCP Terraform, create an HCP Terraform team token from the Organization Settings › API Tokens › Team Tokens tab. Team tokens have the same access level to workspaces as the team, so use a team with read-only access.
    2. Copy the token immediately; HCP Terraform shows API tokens only once.

    Where to find the other values:

    • Base URL (optional): app.terraform.io for HCP Terraform.
    • Account / Org / Workspace (optional): Your HCP Terraform organization name.

    Sentinel shows the secret only once, so copy it before you leave the page.

    Sentinel's public documentation does not cover every step.

    Record-only connector. The Sentinel docs describe it as a policy-as-code tool for HashiCorp products and do not document a standalone API or credential; the HCP Terraform token is the documented credential for the product where Sentinel policies run. Vault or Consul Enterprise Sentinel would use those products' own tokens, which were not researched. Verification: the token page does not give the create-button label or an expiration setting, so those were removed.

    Source: developer.hashicorp.com, developer.hashicorp.com, checked 2026-10-07.

  2. On Compliance › Connectors, open Sentinel, click Connect, choose API token and fill in:

    FieldWhat to enter
    API token / Personal access tokenRequired. Stored encrypted and never shown again.
    Base URL (optional)—
    Account / Org / Workspace (optional)—
  3. Click Connect with token.

Frameworks

No automated compliance test reads Sentinel yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.

On this page