What should I do if my API key leaked?

Act in this order:

1. Revoke it now. Console › API keys › Revoke. It stops working everywhere immediately.
2. Create a replacement with the same permissions and update your app.
3. Check for misuse. In Logs, look for requests made with that key that you don't recognise, and look at your credit balance in Billing.
4. Find the leak. Was it committed to a repository, shown in a screenshot, printed in logs, or shipped in front-end code? Remove it from there too, including from git history.
5. Tell support if you saw misuse. Email support@clatterlabs.com with your Account ID, the key's name and the times you noticed.

Usage made with your keys is your account's responsibility under the Terms, including by someone who obtained an exposed key, so fast revocation matters.

Learn more#

• Limits and best practices
• API keys guide
• Abuse policy

Still need help?#

• General support: support@clatterlabs.com or team@clatterlabs.xyz
• Infrastructure questions, or permanent deletion of your data (your whole account or one service): infrastructure@clatterlabs.xyz

We usually reply within the first hour, and always within 24 hours. A full support team is with you.