Sentry Org Auth Token
Description
General
- Documentation: https://docs.sentry.io/api/auth/
- Summary: Sentry is a tool to help developers monitor errors. Tokens are used to authenticate requests to the API. This detector aims at finding organization auth tokens.
- IPs allowlist: This feature is not available.
- Scopes: Multiple scopes can be chosen when creating tokens. These are described in the Permissions and Scopes page of the documentation.
Revoke the secret
Tokens can be revoked from the user's dashboard.
Check for suspicious activity
This feature is not described in the documentation.
Details for Sentry org auth token
-
Family: Api
-
Category: Monitoring
-
Company: Sentry
-
High recall: False
-
Validity check available: True
-
Analyzer available: False
-
On-premise instances exist: True
-
Only valid secrets raise an alert: False
-
Minimum number of matches: 1
-
Occurrences found for one million commits: 0.45
-
Prefixed: False
-
PreValidators:
- type: ContentWhitelistPreValidator
patterns:
- sntrys_eyjpyxqioje3mt
Examples
- text: sntrys_eyJpYXQiOjE3MTE0Mzc0000000000000LCJ1cmwiOiJodHRwczovL3NlbnRyeS5pbyIsInJlZ2lvbl91cmwiOiJodHRwczovL3VzLnNlbnRyeS5pbyIsIm9yZyI6ImJsb2NrY2hhaW5mb3Jld000000=_MYmTc+U6jIGGQzOwEvxby9DU9enfEEEEEEEEEEEEEEE
apikey: sntrys_eyJpYXQiOjE3MTE0Mzc0000000000000LCJ1cmwiOiJodHRwczovL3NlbnRyeS5pbyIsInJlZ2lvbl91cmwiOiJodHRwczovL3VzLnNlbnRyeS5pbyIsIm9yZyI6ImJsb2NrY2hhaW5mb3Jld000000=_MYmTc+U6jIGGQzOwEvxby9DU9enfEEEEEEEEEEEEEEE
# Fat-fingered secret
- text: Xsntrys_eyJpYXQiOjE3MTE0Mzc0000000000000LCJ1cmwiOiJodHRwczovL3NlbnRyeS5pbyIsInJlZ2lvbl91cmwiOiJodHRwczovL3VzLnNlbnRyeS5pbyIsIm9yZyI6ImJsb2NrY2hhaW5mb3Jld000000=_MYmTc+U6jIGGQzOwEvxby9DU9enfEEEEEEEEEEEEEEE
apikey: sntrys_eyJpYXQiOjE3MTE0Mzc0000000000000LCJ1cmwiOiJodHRwczovL3NlbnRyeS5pbyIsInJlZ2lvbl91cmwiOiJodHRwczovL3VzLnNlbnRyeS5pbyIsIm9yZyI6ImJsb2NrY2hhaW5mb3Jld000000=_MYmTc+U6jIGGQzOwEvxby9DU9enfEEEEEEEEEEEEEEE
