Skip to main content

Checkout.com API Secret Key

Description#

General#

  • Documentation: https://api-reference.checkout.com
  • Summary: Checkout.com is a payment platform for e-commerce websites and mobile applications. Payments are processed via an API, this detector aims at catching the secret key used to access Checkout.com's API. As an API providing financial related information, the corresponding API key is highly sensitive.
  • IPs allowlist: To the best of our knowledge this feature is currently not available.
  • Scopes: There are production and sandbox API keys. Sandbox API keys contain the word "test".

Revoke the secret#

The secret key can be regenerated from the account dashboard.

Check for suspicious activity#

To the best of our knowledge this feature is currently not available.

Details for Checkout secret key#

  • Category: Payment system

  • Company: Checkout.com

  • High recall: True

  • Validity check available: True

  • Only valid secrets raise an alert: False

  • Minimum number of matches: 1

  • Occurrences found for one million commits: 0.1

  • Prefixed: True

  • PreValidators:

- type: ContentWhitelistPreValidator  patterns:  - checkout  - cko- type: ContentWhitelistPreValidator  patterns:  - sk_[a-f0-9]{8}-

Examples#

- text: |    const cko = new Checkout('sk_0b9b5db6-fabc-49d0-b68f-12343dd4f808');  apikey: sk_0b9b5db6-fabc-49d0-b68f-12343dd4f808
- text: |    +    curl -X POST https://api.checkout.com/payments    +      -H 'Authorization: sk_be458ac1-fabc-4194-bf58-123e5ffd88e7'  apikey: sk_be458ac1-fabc-4194-bf58-123e5ffd88e7

Details for Checkout sandbox secret key#

  • Category: Payment system

  • Company: Checkout.com

  • High recall: True

  • Validity check available: True

  • Only valid secrets raise an alert: False

  • Minimum number of matches: 1

  • Occurrences found for one million commits: 1.0

  • Prefixed: True

  • PreValidators:

- type: ContentWhitelistPreValidator  patterns:  - checkout  - cko- type: ContentWhitelistPreValidator  patterns:  - sk_test_[a-f0-9]{8}-

Examples#

- text: |    const cko = new Checkout('sk_test_0b9b5db6-fabc-49d0-b68f-12343dd4f808');  apikey: sk_test_0b9b5db6-fabc-49d0-b68f-12343dd4f808
- text: |    +    curl -X POST https://api.sandbox.checkout.com/payments    +      -H 'Authorization: sk_test_be458ac1-fabc-4194-bf58-123e5ffd88e7'  apikey: sk_test_be458ac1-fabc-4194-bf58-123e5ffd88e7