Skip to main content

PlanetScale Token

Description#

General#

  • Documentation: https://docs.planetscale.com/
  • Summary: PlanetScale is a MySQL compatible, serverless database platform. PlanetScale offers a CLI (pscale) and an API to programmatically manage the databases. This detector aims at catching the Service and OAuth tokens used to authenticate API calls.
  • IPs allowlist: This feature is not currently available.
  • Scopes: Service tokens are linked to a single organization while OAuth tokens are linked to a user and can access every organization of the user.

Revoke the secret#

Service tokens can be deleted in the organization settings and OAuth tokens are revoked via the API or CLI. If the token was generated by pscale login, use the command pscale logout.

Check for suspicious activity#

Detailed logs are accessible in the settings of users and organizations.

Details for Planetscale service token#

  • Category: Development tool

  • Company: PlanetScale

  • High recall: False

  • Validity check available: True

  • Only valid secrets raise an alert: False

  • Minimum number of matches: 2

  • Occurrences found for one million commits: 0.05

  • Prefixed: False

  • PreValidators:

- type: ContentWhitelistPreValidator  patterns:  - pscale_tkn_

Examples#

- text: >    PLANETSCALE_TOKEN_NAME="khgf9jbsrx1l"    PLANETSCALE_TOKEN="pscale_tkn_m_ABffR3bVXQn83xueOUpYrJlA3V7DfnoTVaaSlHCyZ"  client_id: khgf9jbsrx1l  apikey: pscale_tkn_m_ABffR3bVXQn83xueOUpYrJlA3V7DfnoTVaaSlHCyZ

Details for Planetscale oauth token#

  • Category: Development tool

  • Company: PlanetScale

  • High recall: True

  • Validity check available: True

  • Only valid secrets raise an alert: False

  • Minimum number of matches: 1

  • Occurrences found for one million commits: 0.04

  • Prefixed: True

  • PreValidators:

- type: ContentWhitelistPreValidator  patterns:  - pscale_oauth_

Examples#

- text: >    --- /dev/null    +++ b/.config/planetscale/access-token    @@ -0,0 +1 @@    +pscale_oauth_aB0gQfl4oz9_iIocifChjPuvEOS_ieaWTT6ChduCXYZ  apikey: pscale_oauth_aB0gQfl4oz9_iIocifChjPuvEOS_ieaWTT6ChduCXYZ