Skip to main content

Clockwork Key

Description#

General#

  • Documentation: https://www.clockworksms.com/doc/
  • Summary: Clockwork SMS offers a service to send and receive SMS from an application. They provide an API, and various wrapper to interact with it. The authentication method relies on an API key that needs to be attached to every call.
  • IPs allowlist: Clockwork SMS mentions IP allowlisting in their security documentation
  • Scopes: Associating scopes to API key is not specified in the documentation.

Revoke the secret#

The procedure to revoke the API key is not specified in the documentation.

Check for suspicious activity#

Checking for suspicious activity is not mentioned in the documentation.

Details for Clockwork#

  • Category: Messaging system

  • Company: Clockwork

  • High recall: False

  • Validity check available: True

  • Only valid secrets raise an alert: True

  • Minimum number of matches: 1

  • Occurrences found for one million commits: 0.09

  • Prefixed: False

  • PreValidators:

- type: FilenameBanlistPreValidator  banlist_extensions:  - ^(cs|x|p|s|r)?html5?~?$  - ^[aps]?cssc?~?$  - ^lock$  - ^mdx?~?$  - ^storyboard(c|er)?~?$  - ^xib$  banlist_filenames:  - Godeps  check_binaries: false- type: ContentWhitelistPreValidator  patterns:  - clockwork

Examples#

- text: >    clockwork api=3c0c3965368a6b10f7640dbda46abfdca981c2d3  apikey: 3c0c3965368a6b10f7640dbda46abfdca981c2d3