Skip to content

MailGun PAT

Service Name: Mailgun

Service Description: Mailgun is a transactional email API service for developers. It provides powerful APIs that enable you to send, receive, and track emails with ease.

Service Address: https://www.mailgun.com/

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants programmatic access to Mailgun's API for managing domains, sending emails, and accessing analytics.

Secret Revokement URL: https://app.mailgun.com/app/account/security/api_keys

Secret Example: b0f0c9b32-8a9d4f6e-12345678-abcdef12

Suspicious Activity Investigation Instructions:

  • Check Mailgun logs for unusual email sending patterns or volume spikes
  • Review API access logs for unauthorized IP addresses or unusual geographic locations
  • Monitor for changes in domain settings or routing rules
  • Check for creation of unauthorized webhooks or API endpoints
  • Review email delivery statistics for anomalies

Mitigation Instructions:

  • Log in to your Mailgun account at https://app.mailgun.com/
  • Navigate to Account Settings > API Keys
  • Locate the compromised API key
  • Click "Revoke" next to the key
  • Generate a new API key if needed
  • Update the key in all legitimate applications
  • Review account activity for any unauthorized actions
  • Enable two-factor authentication if not already enabled