Skip to content

Chargebee API Key

Service Name: Chargebee

Service Description: Chargebee is a subscription billing and revenue management platform that helps businesses automate recurring billing, invoicing, and payment collections for subscription-based services.

Service Address: https://www.chargebee.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the account level through Chargebee's security settings.

Secret Access Scope: Grants programmatic access to Chargebee's API, allowing management of subscriptions, customers, invoices, payment methods, and other billing-related operations.

Secret Revokement URL: https://www.chargebee.com/docs/2.0/api_keys.html

Secret Example: live_fgHijk1LmNoPqRsTuVwXyZ2345678901234567890123

Suspicious Activity Investigation Instructions:

  • Review Chargebee audit logs for unusual API calls or account modifications
  • Check for unexpected changes to subscription plans, customer accounts, or payment settings
  • Monitor for unusual billing operations or refund activities
  • Look for API requests from unfamiliar IP addresses or locations
  • Verify if there are any unauthorized webhooks or integrations added

Mitigation Instructions:

  • Log in to your Chargebee dashboard

  • Navigate to Settings > Configure Chargebee > API Keys

  • Identify the compromised API key

  • Click the "Revoke" button next to the compromised key
  • Generate a new API key if needed
  • Update the API key in all legitimate applications and services
  • Review and update IP restrictions for API access if available
  • Enable additional security features like two-factor authentication for your

Chargebee account