Skip to content

Vonage API Secret

Service Name: Vonage (formerly Nexmo)

Service Description: Vonage is a cloud communications platform that provides APIs for voice, messaging, and video communication capabilities, allowing developers to integrate these features into their applications.

Service Address: https://www.vonage.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the account level through the Vonage Dashboard.

Secret Access Scope: Grants access to Vonage communication APIs including SMS, voice, video, and verification services.

Secret Revokement URL: https://dashboard.nexmo.com/settings

Secret Example: abCD1234EfGh5678IjKl

Suspicious Activity Investigation Instructions:

  • Review the Vonage Dashboard for unusual API usage patterns or spikes in activity.
  • Check API logs for calls from unexpected geographic locations or IP addresses.
  • Monitor for unusual increases in spending or credit usage.
  • Review SMS and voice call records for unauthorized communications.
  • Check for any changes to API settings or webhooks that you didn't authorize.

Mitigation Instructions:

  • Log in to the Vonage Dashboard at https://dashboard.nexmo.com/.
  • Navigate to Settings > API Settings.
  • Rotate your API key and secret by generating a new pair.
  • Update your applications with the new credentials.
  • Consider implementing IP restrictions if not already in place.
  • Review and update webhook URLs to ensure they point to your secure endpoints.
  • Enable two-factor authentication for your Vonage account if available.
  • Review and revoke access for any team members who no longer require it.