Docs

api_key_exposure.created

Occurs when an API key has been exposed.

Occurs when Paddle detects that an API key has been publicly exposed, for example in a public code repository. Paddle automatically revokes the exposed key. api_key.revoked occurs immediately after.

event_idstringrequired
Example: evt_01gks14ge726w50ch2tmaw2a1x
Unique Paddle ID for this event, prefixed with evt_.
Pattern: ^evt_[a-z\d]{26}$
event_typestringrequired
Type of event sent by Paddle, in the format entity.event_type.
Values
+ Show all values
occurred_atstring (date-time)required
Example: 2024-10-12T07:20:50.52Z
RFC 3339 datetime string of when this event occurred.
notification_idstringrequired
Example: ntf_01ghbkd0frb9k95cnhwd1bxpvk
Unique Paddle ID for this notification, prefixed with ntf_.
Pattern: ^ntf_[a-z\d]{26}$
dataobjectrequired
New or changed entity.
idstringrequired
Example: apkexp_01jkas9tppn3bhadwpcyag45zd
Unique Paddle ID for this API key exposure entity, prefixed with apkexp_.
Pattern: ^apkexp_[a-z\d]{26}$
api_key_idstringrequired
Example: apikey_01gm106t81w94gyjgsaqypkjkl
Unique Paddle ID for this API key entity, prefixed with apikey_.
Pattern: ^apikey_[a-z\d]{26}$
risk_levelstringrequired
Risk level of this exposure.
Values
  • high
    API Key Exposure is high risk.
  • low
    API Key Exposure is low risk.
action_takenstringrequired
Action performed by Paddle as a result of this exposure.
Values
  • revoked
    API Key Exposure led to a revocation.
  • none
    API Key Exposure resulted in no action.
sourcestringrequired
Source of this exposure.
Values
  • github
    API Key was exposed on GitHub.
referencestringrequired
Reference or identifier for this exposure.
Length: 1–250
descriptionstring | nullrequired
Short description of this API key exposure.
Length: 1–250
created_atstring (date-time)required
Example: 2024-10-12T07:20:50.52Z
RFC 3339 datetime string of when this entity was created. Set automatically by Paddle.
api_key_exposure.created
{
  "event_id": "evt_01jkdr0rc527wcjdg1txsdxhtk",
  "event_type": "api_key_exposure.created",
  "occurred_at": "2025-08-19T12:58:38.746382Z",
  "notification_id": "ntf_01jkdr1mgbe62eqkh3p0fq8b0s",
  "data": {
    "id": "apkexp_01jkas9tppn3bhadwpcyag45zd",
    "api_key_id": "apikey_01jkdpbhazdpn3wpcya45as9tg",
    "risk_level": "high",
    "action_taken": "revoked",
    "source": "github",
    "reference": "https://github.com/octocat/Hello-World/blob/12345600b9cbe38a219f39a9941c9319b600c002/foo/bar.txt",
    "description": "Exposed in Commit 12345600b9cbe38a219f39a9941c9319b600c002",
    "created_at": "2025-08-19T12:58:38.746382Z"
  }
}

Was this page helpful?