Skip to content

MailGun API Key

Service Name: Mailgun

Service Description: Mailgun is a transactional email API service for developers. It provides a set of powerful APIs that enable you to send, receive, and track emails with ease.

Service Address: https://www.mailgun.com/

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to Mailgun API for sending emails, managing domains, and accessing email analytics.

Secret Revokement URL: https://app.mailgun.com/app/account/security/api_keys

Secret Example: key-3ax6xnjp29jd6fds4gc373sgvjxteol0

Suspicious Activity Investigation Instructions:

  • Check Mailgun logs for unusual email sending patterns or volume spikes
  • Review API access logs for unauthorized IP addresses accessing your account
  • Examine domain verification status for any unexpected changes
  • Monitor email delivery rates and bounce rates for anomalies
  • Check for any new webhooks or routing rules that were not created by your team

Mitigation Instructions:

  • Log in to your Mailgun account at https://app.mailgun.com
  • Navigate to Account Settings > API Keys
  • Revoke the compromised API key immediately
  • Create a new API key with appropriate permissions
  • Update your application configurations with the new API key
  • Review and update security settings including IP restrictions if available
  • Enable two-factor authentication for your Mailgun account