Google API Key

Description

General

• Documentation: https://cloud.google.com/docs/authentication/api-keys
• Summary: Google API key is used to authenticate requests to any Google API (such as Maps for instance). Although these API keys don't give access to personal or sensitive data, exposing them can result in quota theft and unauthorized usage.

Revoke the secret

Existing keys can be managed from the console.

Details for Google API Key

• Family: token

• Category: cloud_provider

• Company: Google

• High recall: True

• Validity check available: True

• Analyzer available: True

• Revoker available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Occurrences found for one million commits: 1226.16

• Prefixed: True

Secret Analyzer

Analysis Method

• Provider allows scopes enumeration: False
• Total network call count: 26
• Total call count may vary: True

HTTP Calls

Requests are designed to capture metadata and not to function effectively.

• GET: https://civicinfo.googleapis.com/civicinfo/v2/elections
• GET: https://customsearch.googleapis.com/customsearch/v1
• GET: https://dlp.googleapis.com/v2/infoTypes
• GET: https://generativelanguage.googleapis.com/v1beta/models
• GET: https://geocode.googleapis.com/v4beta/geocode/address/France
• GET: https://identitytoolkit.googleapis.com/v2/passwordPolicy
• GET: https://kgsearch.googleapis.com/v1/entities:search
• GET: https://pagespeedonline.googleapis.com/pagespeedonline/v5/runPagespeed
• GET: https://places.googleapis.com/v1/places/ChIJoRyG2ZurNTERqRfKcnt_iOc
• GET: https://pollen.googleapis.com/v1/forecast:lookup
• GET: https://roads.googleapis.com/v1/snapToRoads
• GET: https://solar.googleapis.com/v1/buildingInsights:findClosest
• GET: https://www.googleapis.com/books/v1/volumes
• GET: https://www.googleapis.com/youtube/v3/activities
• POST: https://airquality.googleapis.com/v1/currentConditions:lookup
• POST: https://areainsights.googleapis.com/v1:computeInsights
• POST: https://firebasedynamiclinks.googleapis.com/v1/shortLinks
• POST: https://firebaseinstallations.googleapis.com/v1/projects/123/installations
• POST: https://language.googleapis.com/v1/documents:annotateText
• POST: https://routes.googleapis.com/directions/v2:computeRoutes
• POST: https://safebrowsing.googleapis.com/v4/threatMatches:find
• POST: https://speech.googleapis.com/v1/speech:recognize
• POST: https://texttospeech.googleapis.com/v1/text:synthesize
• POST: https://translation.googleapis.com/language/translate/v2
• POST: https://vision.googleapis.com/v1/files:annotate

Other Calls

Non-HTTP queries or HTTP calls made through a third-party app (e.g., Python package). No other calls for this analyzer.