Skip to content

Mailchimp API Key

Service Name: Mailchimp

Service Description: Mailchimp is an all-in-one marketing platform that helps businesses manage and talk to clients, customers, and other interested parties. Its approach to marketing focuses on healthy contact management practices, beautifully designed campaigns, and powerful data analysis.

Service Address: https://mailchimp.com/

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to Mailchimp API resources including campaigns, lists, templates, and reports.

Secret Revokement URL: https://admin.mailchimp.com/account/api/

Secret Example: a1b2c3d4e5f6g7h8i9j0-us11

Suspicious Activity Investigation Instructions:

  • Check Mailchimp account for unauthorized campaigns or list modifications
  • Review API activity logs for unusual access patterns or locations
  • Verify if any unauthorized exports of subscriber data have occurred
  • Check for changes to templates or campaign content
  • Monitor for unusual sending patterns or volumes

Mitigation Instructions:

  • Log in to your Mailchimp account and navigate to Account > Extras > API keys
  • Locate the compromised API key and click "Disable" or "Delete"
  • Create a new API key with appropriate permissions
  • Update the API key in all legitimate applications
  • Review and update account security settings including two-factor authentication
  • Audit all connected applications and remove any unauthorized integrations