Skip to content

Freshdesk API Key

Service Name: Freshdesk

Service Description: Freshdesk is a cloud-based customer support software that provides helpdesk support with all smart automations to get things done faster. It allows businesses to streamline their customer service operations through ticketing, knowledge base, and multi-channel support.

Service Address: https://freshdesk.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the account level in Freshdesk's security settings.

Secret Access Scope: Grants programmatic access to Freshdesk API endpoints, allowing management of tickets, contacts, companies, solutions, and other Freshdesk resources.

Secret Revokement URL: https://support.freshdesk.com/en/support/solutions/articles/50000000306-generating-and-revoking-api-keys

Secret Example: 7d8e35026d554f2a7f2138XXXXXXXXf

Suspicious Activity Investigation Instructions:

  • Review Freshdesk audit logs for unusual API calls or access patterns
  • Check for unauthorized ticket creation, modification, or deletion
  • Monitor for unusual data exports or mass operations
  • Look for API calls from unfamiliar IP addresses or locations
  • Verify if there are any new automation rules or webhooks created

Mitigation Instructions:

  • Log in to your Freshdesk account as an administrator
  • Navigate to Profile settings (click on your profile picture in the top right)
  • Select the "API Key" tab
  • Click "Reset API Key" to invalidate the current key
  • Generate a new API key if needed
  • Update the API key in all legitimate applications
  • Review and update IP restrictions in security settings if applicable
  • Consider implementing additional authentication methods like OAuth if available