Metacrafter Registry

Datatypes

API key or client secret

ID api_key

DatatypeNot PIIDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Secret string that an application presents to an API or an identity provider to authenticate itself, such as an API key, a subscription key or an OAuth client secret. Formats differ by service.

Categories
Secrets and credentials (passwords, keys, tokens)
Countries
Global (not tied to a country)
Languages
Common to most languages
Microsoft Purview
Microsoft Entra client secret, Azure AD client secret, Azure Bot Framework secret key, Azure Bot service app secret, Azure Cognitive Search API key, Azure Cognitive Service key, Azure DevOps app secret, Azure Function Master / API key, Azure Machine Learning web service API key, Azure Maps subscription key, Client secret / API key, Microsoft Bing maps key, All Credential Types, All credentials
Quality
55/100 · missing: regexp, examples, negative example, translation
Metacrafter rules
no detection rule yet
Supported by tools
Microsoft Purview Data Loss Prevention, Nightfall AI

Child datatypes

IDNameCategoriesCountriesDescription
anthropic_api_key Anthropic API key draft secrets global Secret key of the Anthropic (Claude) API, sent in the x-api-key header. Standard keys start with sk-ant-api03- and Admin API keys, which...
cloudflare_origin_ca_key Cloudflare Origin CA key draft secrets global Key for the Cloudflare Origin CA certificates API, often sent in the X-Auth-User-Service-Key header and also used by the Keyless SSL key...
jfrog_api_key JFrog Artifactory API key draft secrets global Deprecated API key of JFrog Artifactory: the prefix AKCp followed by 69 letters and digits (the format that the gitleaks secret scanner...
linear_api_key Linear API key draft secrets global Personal API key of Linear, the issue tracking service: lin_api_ followed by 40 letters and digits.
mailchimp_api_key Mailchimp API key draft secrets global API key of the Mailchimp Marketing API: 32 hexadecimal digits, a hyphen and the data center of the account (for example us6), which is...
new_relic_user_api_key New Relic user key draft secrets global User key of New Relic, a personal API key that NerdGraph, New Relic's GraphQL API, requires for querying data and changing...
openai_api_key OpenAI API key draft secrets global Secret key of the OpenAI API. Keys start with sk-; project, service account and admin keys start with sk-proj-, sk-svcacct- or...
postman_api_key Postman API key draft secrets global API key of the Postman API, sent in the X-API-Key header: PMAK- followed by 24 hexadecimal digits, a hyphen and 34 more hexadecimal digits.
rubygems_api_key RubyGems API key draft secrets global API key of RubyGems.org, used by the gem CLI to push and manage gems, for example through the GEM_HOST_API_KEY environment variable:...
sendgrid_api_key SendGrid API key draft secrets global API key of Twilio SendGrid, also used as the SMTP password. Keys are always 69 characters long and start with SG. followed by letters,...
sendinblue_api_key Sendinblue API key draft secrets global API key of the Sendinblue email marketing service: xkeysib- followed by 64 hexadecimal digits, a hyphen and 16 letters and digits.
shopify_shared_secret Shopify app shared secret draft secrets global Shared secret of a Shopify app: the prefix shpss_ followed by 32 hexadecimal digits.
square_oauth_secret Square OAuth application secret draft secrets global Application secret of a Square developer application, which the application uses to exchange OAuth authorization codes for access...
stripe_api_key Stripe secret or restricted API key draft secrets global Server-side API key of Stripe. Secret keys start with sk_ and restricted keys with rk_, followed by test_ for a sandbox or live_ for...
telegram_bot_token Telegram bot token draft secrets global Token that authorizes a bot in the Telegram Bot API: the numeric bot ID, a colon and a secret that starts with A. Telegram documents the...

Sources

Use this record