Customer.io App Keys

Description

General

• Documentation: https://customer.io/docs/api/#section/Overview

• Summary: Customer.io is a tool which helps sending automated messages to customers via various channels (email, push notifications, SMS, ...). The API is divided in two parts. The track API part is the one managing people, their devices and segment assignations. The authentication is performed with both a site_id and an api_key. They are used as Basic authentication on direct HTTP calls. They can also be used via the API clients (currently Python, NodeJS, GO and Ruby).

• IPs allowlist: An IP allowlist can be associated to each workspace. However, this is not mandatory.

• Scopes: Customer.io supports workspaces separation, which splits and isolates data. Each credentials couple is associated to a specific workspace and restricted to it.

Revoke the secret

All credentials can be accessed and revoked from the backoffice and can be revoked at any time.

Check for suspicious activity

As of the time of writing this documentation, this feature is not yet supported.

Details for Customer.io App Keys

• Family: token

• Category: messaging_system

• Company: Customer.io

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.08

• Prefixed: False

• PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions: []
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: true
  ban_markup: true
- type: ContentWhitelistPreValidator
  patterns:
    - customer[._-]?io

Examples

- text: CUSTOMERIO-APP-API-KEY = "20436c6351668b25a74a2c289a639d3f";
  apikey: 20436c6351668b25a74a2c289a639d3f
- text: customerio-key = "59966eb370ed6dacd32fd7739ce05759"
  apikey: 59966eb370ed6dacd32fd7739ce05759