---
id: "mapbox_access_token"
kind: "datatype"
status: "draft"
is_pii: false
categories: ["secrets"]
langs: ["common"]
quality: 70
url: "https://registry.apicrafter.io/datatype/mapbox_access_token"
---

# Mapbox access token (`mapbox_access_token`)

> **Draft.** Draft records have not been reviewed yet and may be incomplete or wrong; do not treat them as authoritative for legal or compliance decisions.

Access token of the Mapbox APIs. Mapbox documents three kinds by prefix: public tokens (pk), meant to be embedded in client applications, secret tokens (sk) and temporary tokens (tk). The regexp applies to all three the structure that gitleaks checks for public tokens: the prefix, a dot, 60 letters and digits, a dot and 22 letters and digits.

- Parent datatype: `access_token`
- Personal data (PII): no
- Categories: Secrets and credentials (passwords, keys, tokens) (secrets)
- Countries: global
- Languages: Common to most languages (common)
- Classification: identifier

## Detection

Regular expression (Python `re`):

```
^(?:pk|sk|tk)\.[A-Za-z0-9]{60}\.[A-Za-z0-9]{22}$
```

## Examples

- `sk.` (invalid example) — Prefix without the secret

## Supported by tools

- `datadogsds`
- `gitguardian`
- `githubsecretscanning`
- `gitleaks`

## Sources

- doc: <https://docs.mapbox.com/accounts/guides/tokens/>
- other: <https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml>

## Quality

Score 70/100. Missing: examples, mapping (Wikidata, Schema.org, ...), translation.

JSON: <https://registry.apicrafter.io/api/v1/datatypes/mapbox_access_token.json> · Edit: <https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/secrets/mapbox_access_token.yaml>