Skip to content

OpenWeather API Key

Service Name: OpenWeather

Service Description: OpenWeather provides current weather data, forecasts, historical data, and weather maps through a comprehensive weather API for developers.

Service Address: https://openweathermap.org/

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to OpenWeather API services including current weather data, forecasts, historical data, and weather maps.

Secret Revokement URL: https://home.openweathermap.org/api_keys

Secret Example: a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6

Suspicious Activity Investigation Instructions:

  • Check API usage logs in your OpenWeather account dashboard for unusual request patterns
  • Look for unexpected spikes in API calls that could indicate unauthorized usage
  • Monitor for API calls from unfamiliar geographic locations
  • Review your application logs for unauthorized weather data requests

Mitigation Instructions:

  • Log in to your OpenWeather account at https://home.openweathermap.org/
  • Navigate to the "API keys" section
  • Delete the compromised API key
  • Generate a new API key with appropriate permissions
  • Update the API key in all legitimate applications
  • Consider implementing rate limiting in your applications to prevent abuse