Paystack Key

Description

General

• Documentation: https://paystack.com/docs/api/
• Summary: Paystack offers payment processing software and application programming interfaces (APIs) for e-commerce websites and mobile applications in several African countries. As an API providing financial related information, the corresponding API key is highly sensitive.
• IPs allowlist: This feature is not mentioned in the API documentation.
• Scopes: Users can create test keys and production keys. This detector only catches production keys.

Revoke the secret

Paystack key can be revoked or rolled from the dashboard.

Check for suspicious activity

Audit logs can be verified on the dashboard.

Details for Paystack Key

• Family: token

• Category: payment_system

• Company: Paystack

• High recall: True

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.73

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - sk_live_

Examples

- text: |
    PAYSTACK_KEY = sk_live_ec689644470300562f498f083a26b3bc0809cf56
  apikey: sk_live_ec689644470300562f498f083a26b3bc0809cf56

# Fat-fingered secret
- text: ssk_live_ec689644470300562f498f083a26b3bc0809cf56
  apikey: sk_live_ec689644470300562f498f083a26b3bc0809cf56