Doppler API Key

Description

General

Documentation: https://docs.doppler.com/reference#api
Summary: Doppler is a secrets manager, it can be used to sync environment variable. The API can be used to access/create/edit secrets stored in Doppler.
IPs allowlist: Trusted IPs can be set up per environment with a Pro subscription.
Scopes: Personal and CLI tokens can both read and write in a workspace and service tokens are read-only in a single configuration.

Revoke the secret

An API key can be rolled or revoked on the Doppler workspace dashboard, in the Tokens menu. Every secrets accessible with the leaked doppler token should also be revoked.

Check for suspicious activity

The actions taken with a token can be audited in the workspace dashboard under Activity.

Details for `Doppler apikey`

Family: Api
Category: Secret management
Company: Doppler
High recall: True
Validity check available: True
On-premise instances exist: True
Only valid secrets raise an alert: False
Minimum number of matches: 1
Occurrences found for one million commits: 0.05
Prefixed: True
PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - dp\.(pt|ct|scim|st\.)

Examples

- text: |
    curl -H 'api-key: dp.pt.zkxYYBKO2oztRQj72SOAA13PmVyTwI7AboM8bknx' 'https://api.doppler.com/v3/workplace'
  apikey: dp.pt.zkxYYBKO2oztRQj72SOAA13PmVyTwI7AboM8bknx
- text: |
    "DOPPLER_SERVICE_TOKEN": { {input: "dp.st.dev.5iSgsylLUh1V8gWGbwbWbO8SHSxs3wkdkYAYE3kI"}, },
  apikey: dp.st.dev.5iSgsylLUh1V8gWGbwbWbO8SHSxs3wkdkYAYE3kI
- text: |
    cli_token: dp.ct.Hz53zCklAAldpZywPRaXPaaYlABB1HOrKgtvyhGL
  apikey: dp.ct.Hz53zCklAAldpZywPRaXPaaYlABB1HOrKgtvyhGL
- text: |
    Token SCIM := dp.scim.IcgO4od2ONhDCys8tELOouUK9RSDCevePjks0yom
  apikey: dp.scim.IcgO4od2ONhDCys8tELOouUK9RSDCevePjks0yom