Skip to main content

Contentful Content Delivery API Key



  • Documentation:
  • Summary: Contentful is a service that helps managing and distributing content. This detector detects API keys used to authenticate with the Content Delivery API. This API enables to retrieve content. For information about the Content Management API, refer to this page.
  • IPs allowlist: Not available.
  • Scopes: It is possible to restrict a key's access privileges to a list of environments.

Revoke the secret#

To revoke a secret, go to the project, in the Settings menu click API keys. A list of keys will be displayed. To revoke a key, click on it and then click on the Delete button.

Check for suspicious activity#

There is no information on key usage on the dashboard.

Details for Contentful delivery apikey#

  • Family: Api

  • Category: Collaboration tool

  • Company: Contentful

  • High recall: False

  • Validity check available: True

  • On-premise instances exist: False

  • Only valid secrets raise an alert: True

  • Minimum number of matches: 2

  • Occurrences found for one million commits: 7.59

  • Prefixed: False

  • PreValidators:

- type: FilenameBanlistPreValidator  banlist_extensions: []  banlist_filenames: []  check_binaries: false  include_default_banlist_extensions: true  ban_markup: false- type: ContentWhitelistPreValidator  patterns:  - contentful  - ctf_


- text: |    # contentful credentials    SPACE_ID = 'cjgk2fn5yome'    ACCESS_TOKEN = '9Rpff2_uxUrxuiyE_VQ7LlLcwWEqgTooEymLCkNFECA'  client_id: cjgk2fn5yome  client_secret: 9Rpff2_uxUrxuiyE_VQ7LlLcwWEqgTooEymLCkNFECA- text: |    import { createClient } from 'contentful';
    const Client = createClient({        space: '8icnvc7n28re',        accessToken: 'ZTrL6TXWsP-A-FrUi6SEGcqw3u4kLSeMQx76gih14Go',    });  client_id: 8icnvc7n28re  client_secret: ZTrL6TXWsP-A-FrUi6SEGcqw3u4kLSeMQx76gih14Go- text: |    export const environment = {      // Contentful Credentials      spaceId: '8icnvc7n28re',      token: 'ab0e432b69b041271b60fbb48110dac5d4066d8751c46ab96ce7ffffffffffff',    }  client_id: 8icnvc7n28re  client_secret: ab0e432b69b041271b60fbb48110dac5d4066d8751c46ab96ce7ffffffffffff- text: |    # contentful credentials    SPACE_ID = 'cjgk2fn5yome'    ACCESS_TOKEN = '9Rpff2_uxUrxuiyE_VQ7LlLcwWEqgTooEymLCkNFECA'
  client_id: cjgk2fn5yome  client_secret: 9Rpff2_uxUrxuiyE_VQ7LlLcwWEqgTooEymLCkNFECA