Skip to content

TestProject API Key

Service Name: TestProject

Service Description: TestProject is a free test automation platform that allows users to create, manage, and execute automated tests for web, mobile, and API testing. It provides a collaborative environment for teams to work together on test automation projects.

Service Address: https://testproject.io/

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants programmatic access to TestProject's API, allowing users to manage tests, test data, reports, and other resources within their TestProject account.

Secret Revokement URL: https://app.testproject.io/#/integrations/api

Secret Example: tp_1234567890abcdef1234567890abcdef

Suspicious Activity Investigation Instructions:

  • Review the TestProject dashboard for unauthorized test executions or modifications
  • Check for unusual API calls or access patterns in the TestProject logs
  • Monitor for unexpected test creation, modification, or deletion
  • Verify if there are any unauthorized agents connected to your account
  • Review recent project changes or modifications that were not authorized

Mitigation Instructions:

  • Log in to your TestProject account at https://app.testproject.io/

  • Navigate to Integrations > API section

  • Revoke the compromised API key by clicking the "Revoke" button

  • Generate a new API key if needed
  • Update all legitimate applications or scripts to use the new API key
  • Review and update access permissions for your TestProject account
  • Enable additional security measures if available, such as two-factor

authentication

  • Monitor account activity for any further suspicious actions