---
id: "flutterwave_secret_key"
kind: "datatype"
status: "draft"
is_pii: false
categories: ["secrets"]
langs: ["common"]
quality: 70
url: "https://registry.apicrafter.io/datatype/flutterwave_secret_key"
---

# Flutterwave secret key (`flutterwave_secret_key`)

> **Draft.** Draft records have not been reviewed yet and may be incomplete or wrong; do not treat them as authoritative for legal or compliance decisions.

Secret API key of the Flutterwave payments API. Flutterwave documents that secret keys start with FLWSECK and that test keys add _TEST to the prefix. The regexp applies the structure of the gitleaks rule for test keys (32 characters from 0-9 and a-h, then -X) to live keys as well.

- Parent datatype: `api_key`
- Personal data (PII): no
- Categories: Secrets and credentials (passwords, keys, tokens) (secrets)
- Countries: global
- Languages: Common to most languages (common)
- Classification: identifier

## Detection

Regular expression (Python `re`):

```
^FLWSECK(?:_TEST)?-[0-9a-hA-H]{32}-X$
```

## Examples

- `FLWSECK_TEST-` (invalid example) — Prefix without the secret

## Supported by tools

- `datadogsds`
- `gitguardian`
- `githubsecretscanning`
- `gitleaks`

## Sources

- doc: <https://developer.flutterwave.com/v3.0/docs/authentication>
- other: <https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml>

## Quality

Score 70/100. Missing: examples, mapping (Wikidata, Schema.org, ...), translation.

JSON: <https://registry.apicrafter.io/api/v1/datatypes/flutterwave_secret_key.json> · Edit: <https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/secrets/flutterwave_secret_key.yaml>