Skip to main content

Postmark Token

Description#

General#

  • Documentation: https://postmarkapp.com/developer/api/overview
  • Summary: Postmark is an emailing platform. This detectors aims at catching credentials used to send emails or modify resources linked to an account.
  • IPs allowlist: This feature is not available.
  • Scopes: There are two types of tokens: Account and Server API tokens. The first one allows to manage servers, the second one to send emails and modify settings of the linked server.

Revoke the secret#

Tokens can be revoked from the account's dashboard.

Check for suspicious activity#

This feature is not available.

Details for Postmark#

  • Category: Messaging system

  • Company: Postmark

  • High recall: False

  • Validity check available: True

  • Only valid secrets raise an alert: True

  • Minimum number of matches: 1

  • Occurrences found for one million commits: 1.09

  • Prefixed: False

  • PreValidators:

- type: FilenameBanlistPreValidator  banlist_extensions:  - ^(cs|x|p|s|r)?html5?~?$  - ^[aps]?cssc?~?$  - ^lock$  - ^mdx?~?$  - ^storyboard(c|er)?~?$  - ^xib$  banlist_filenames: []  check_binaries: false- type: ContentWhitelistPreValidator  patterns:  - postmark

Examples#

- text: 'config.action_mailer.postmark_settings = { :api_token => "455d0881-3b76-46b9-91d2-905a0f26c867" }'  apikey: 455d0881-3b76-46b9-91d2-905a0f26c867- text: 'var client = new postmark.Client("455d0881-3b76-46b9-91d2-905a0f26c867");'  apikey: 455d0881-3b76-46b9-91d2-905a0f26c867