Plaid Keys

Description

General

• Documentation: https://plaid.com/docs/api/
• Summary: Plaid is a financial services company. client_id and client_secret allow users and applications to access all resources from an account through the API.
• IPs allowlist: This feature is not currently available.
• Scopes: These credentials allow user to access all data from the Plaid account. Different credentials are used for sandbox and production environments.

Revoke the secret

Credentials can be changed in the developers dashboard.

Check for suspicious activity

This feature is not currently available.

Details for Plaid Keys

• Family: credentials

• Category: payment_system

• Company: Plaid

• High recall: False

• Validity check available: True

• Analyzer available: True

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 2

• Occurrences found for one million commits: 4.49

• Prefixed: False

• PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions:
    - ^lock$
    - ^storyboard(c|er)?~?$
    - ^xib$
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: false
  ban_markup: false
- type: ContentWhitelistPreValidator
  patterns:
    - plaid

Examples

- text: |
    PLAID_CLIENT_ID = a1c1774894e2b8b54bc1b78b
    PLAID_SECRET = 63b5936f38dbfed45bd53eff7d3db5
  client_id: a1c1774894e2b8b54bc1b78b
  client_secret: 63b5936f38dbfed45bd53eff7d3db5

Secret Analyzer

Analysis Method

• Provider allows scopes enumeration: False
• Total network call count: 2
• Total call count may vary: False

HTTP Calls

Requests are designed to capture metadata and not to function effectively.

• POST: /institutions/get

Other Calls

Non-HTTP queries or HTTP calls made through a third-party app (e.g., Python package). No other calls for this analyzer.