Skip to content

PayPal Braintree Secret

Service Name: PayPal Braintree

Service Description: PayPal Braintree is a payment processing platform that allows businesses to accept payments online, in-app, or in-person. It provides a complete payment solution with support for credit cards, debit cards, digital wallets, and alternative payment methods.

Service Address: https://www.braintreepayments.com/

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to the Braintree payment processing API, allowing transactions, customer management, and payment method operations.

Secret Revokement URL: https://developer.paypal.com/braintree/docs/guides/account/control-panel

Secret Example: EEZ2JRVPX2BJXKXMZL7NQFPXVVGZC78QWERTYUIOPASDFGHJKLZXCVBNM

Suspicious Activity Investigation Instructions:

  • Review transaction logs in the Braintree Control Panel for unauthorized transactions
  • Check for unusual API calls or access patterns in the activity logs
  • Verify if there are any new payment methods or customers added without authorization
  • Look for changes in transaction settings or webhook configurations
  • Monitor for unusual transaction volumes or amounts

Mitigation Instructions:

  • Log into your Braintree Control Panel immediately
  • Navigate to Account > API Keys section
  • Revoke the compromised API key
  • Generate a new API key with appropriate permissions
  • Update all applications and services using the old key
  • Review and update security settings, including IP restrictions if available
  • Enable additional security features like two-factor authentication
  • Review webhook endpoints and ensure they point to legitimate destinations