Skip to content

Shippo Test API Key

Service Name: Shippo

Service Description: Shippo is a shipping API platform that helps businesses connect with multiple shipping carriers, compare rates, print labels, track packages, and automate shipping processes.

Service Address: https://goshippo.com

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to Shippo's API in test mode, allowing developers to test shipping functionality without creating actual shipments.

Secret Revokement URL: https://apps.goshippo.com/api

Secret Example: shippo_test_a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0

Suspicious Activity Investigation Instructions:

  • Review Shippo dashboard for any unauthorized test shipments or API calls
  • Check API logs for unusual patterns of access or high volume of requests
  • Verify if the API key has been used from unfamiliar IP addresses
  • Look for any test labels generated that don't match your expected testing patterns

Mitigation Instructions:

  • Log in to your Shippo account dashboard
  • Navigate to API section (https://apps.goshippo.com/api)
  • Revoke the compromised API key
  • Generate a new test API key
  • Update the key in all your development and testing environments
  • Consider implementing IP restrictions for API access if available