Skip to content

Fullcontact API Key

Service Name: FullContact

Service Description: FullContact is a privacy-safe identity resolution company that helps businesses improve their understanding of their customers and prospects by providing identity resolution and customer insights through their API platform.

Service Address: https://www.fullcontact.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured in the FullContact Dashboard under API Key management.

Secret Access Scope: Grants access to FullContact's Person, Company, and Resolve APIs for identity resolution and data enrichment services.

Secret Revokement URL: https://dashboard.fullcontact.com/api-keys

Secret Example: fc_api_key_a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6

Suspicious Activity Investigation Instructions:

  • Review API usage logs in the FullContact Dashboard for unusual activity or high volume requests.
  • Check for API calls from unexpected geographic locations or IP addresses.
  • Monitor for unusual patterns in the types of data being requested.
  • Review billing information for unexpected charges that might indicate unauthorized usage.
  • Check if the API key is being used in applications or services that weren't authorized.

Mitigation Instructions:

  • Log in to the FullContact Dashboard at https://dashboard.fullcontact.com/
  • Navigate to the API Keys section.
  • Identify the compromised API key.
  • Click on Revoke or Delete to immediately invalidate the key.
  • Generate a new API key to replace the compromised one.
  • Update all legitimate applications and services with the new API key.
  • Consider implementing IP restrictions for the new API key to limit access to specific IP addresses.
  • Review and update your secret management practices to prevent future exposures.