Square access token
ID square_access_token
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Personal or OAuth access token of the Square APIs. Square does not document the format; secret scanners such as gitleaks recognize it by the prefix EAAA or the older prefix sq0atp- followed by 22 to 60 letters, digits, underscores or hyphens.
- Parent datatype
- Access token
access_token - Categories
- Secrets and credentials (passwords, keys, tokens)
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 73/100 · missing: second example, negative example, mapping (Wikidata, Schema.org, ...), translation
- Metacrafter rules
- no detection rule yet
- Supported by tools
- Gitleaks, Semgrep, TruffleHog
Regular expression
^(?:EAAA|sq0atp-)[A-Za-z0-9_-]{22,60}$Python re syntax.
Examples
| Value | Description |
|---|---|
| EAAAExampleTokenExampleTokenExampleTokenExampleTokenExampleToken | Constructed, non-functional value |
Sources
- doc: https://developer.squareup.com/docs/build-basics/access-tokens
- other: https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/square_access_token - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/secrets/square_access_token.yamlon GitHub