Skip to content

Shippo Live API Key

Service Name: Shippo

Service Description: Shippo is a shipping API platform that helps businesses with shipping needs by connecting them to multiple carriers, automating label creation, tracking packages, and managing shipping operations.

Service Address: https://goshippo.com/

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to Shippo's API for creating shipping labels, tracking packages, and managing shipping operations in a live production environment.

Secret Revokement URL: https://goshippo.com/docs/api#authentication

Secret Example: shippo_live_1a2b3c4d5e6f7g8h9i0j1k2l3m4n5o6p7q8r9s0t

Suspicious Activity Investigation Instructions:

  • Review Shippo dashboard for unauthorized shipping labels or transactions
  • Check API logs for unusual API calls or access patterns
  • Monitor for unexpected shipping costs or charges
  • Verify that shipping addresses and destinations match expected business operations
  • Look for shipping labels created outside of normal business hours

Mitigation Instructions:

  • Log into your Shippo account dashboard
  • Navigate to the API section or Settings
  • Revoke the compromised API key
  • Generate a new API key
  • Update the API key in all legitimate applications and services
  • Review and update API access controls and permissions
  • Enable additional security features like IP restrictions if available