Skip to content

Insomnia API Key

Service Name: Insomnia

Service Description: Insomnia is an open-source, cross-platform API client that helps developers design, debug, and test APIs. It supports REST, GraphQL, gRPC, and other API protocols, allowing users to organize requests, set environments, and automate workflows.

Service Address: https://insomnia.rest/

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to Insomnia's cloud features including team collaboration, request history synchronization, and workspace sharing.

Secret Revokement URL: https://insomnia.rest/account/

Secret Example: ins_1a2b3c4d5e6f7g8h9i0j

Suspicious Activity Investigation Instructions:

  • Check for unauthorized access to your Insomnia workspaces or collections
  • Review team member access and permissions in your Insomnia account
  • Monitor for unexpected changes to your API collections or environments
  • Check for unusual synchronization activity across devices
  • Review account activity logs if available through Insomnia Cloud

Mitigation Instructions:

  • Log in to your Insomnia account on the website
  • Navigate to account settings

  • Revoke the compromised API key

  • Generate a new API key

  • Update the API key in all authorized applications
  • Review and adjust sharing permissions for your workspaces
  • Enable two-factor authentication if available
  • Consider rotating API keys periodically as a security best practice