Skip to content

Bitbucket Client ID

Service Name: Bitbucket

Service Description: Bitbucket is a Git-based source code repository hosting service owned by Atlassian. It offers both commercial plans and free accounts with an unlimited number of private repositories.

Service Address: https://bitbucket.org/

Validation Type: -

IP Allow list: Does not exist

Secret Access Scope: Grants access to Bitbucket APIs on behalf of a user or application.

Secret Revokement URL: https://bitbucket.org/account/settings/app-authorizations/

Secret Example: aBcD3FgH1JkLmN0PqRsT

Suspicious Activity Investigation Instructions:

  • Check Bitbucket access logs for unusual login attempts or API calls
  • Review recently created webhooks or integrations
  • Check for unauthorized repository access or changes
  • Monitor for unusual pull requests or code commits
  • Review audit logs for changes to repository permissions

Mitigation Instructions:

  • Navigate to Bitbucket account settings
  • Go to "OAuth" under "Access Management"
  • Find the compromised OAuth consumer
  • Click "Delete" to revoke the client ID and associated secret
  • Create a new OAuth consumer with appropriate permissions
  • Update all legitimate applications with the new credentials