Skip to content

Mode Analytics API Key

Service Name: Mode Analytics

Service Description: Mode Analytics is a collaborative data platform that combines SQL, R, Python, and visual analytics in one place. It helps teams analyze, visualize, and share data, enabling data-driven decision-making across organizations.

Service Address: https://modeanalytics.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the organization level through Mode's security settings.

Secret Access Scope: Grants programmatic access to Mode Analytics platform, allowing users to create, read, update, and delete reports, queries, and other resources within the Mode platform.

Secret Revokement URL: https://mode.com/help/articles/api-reference/#authentication

Secret Example: sk_123456789abcdefghijklmnopqrstuvwxyz

Suspicious Activity Investigation Instructions:

  • Review the Mode Analytics audit logs for unusual query patterns or data access.
  • Check for unauthorized report creations or modifications.
  • Monitor for unusual data exports or sharing activities.
  • Look for API calls from unfamiliar IP addresses or locations.
  • Verify if there are any new user accounts or permission changes made through the API.

Mitigation Instructions:

  • Log in to your Mode Analytics account and navigate to your user settings.
  • Locate the API tokens section and identify the compromised token.
  • Click on the "Revoke" button next to the compromised token.
  • Generate a new API token if needed for legitimate applications.
  • Update any legitimate applications or scripts with the new token.
  • Review and adjust user permissions to ensure proper access controls.
  • Consider implementing IP restrictions for API access if not already in place.
  • Enable additional security features like two-factor authentication for all users.