For AI agents and LLMs: a structured documentation index is available at /llms.txt. Every page has a Markdown sibling — append .md to any URL. To search these docs, send a GET request to https://paddle-docs-retrieval.kapa-paddle.workers.dev/?q=<question> with a URL-encoded question. No authentication needed.

Skip to content
Paddle Docs home

api_key_exposure.created

Occurs when an API key has been exposed.

Occurs when Paddle detects that an API key has been publicly exposed, for example in a public code repository. Paddle automatically revokes the exposed key. api_key.revoked occurs immediately after.

event_idstringrequired
Example: evt_01gks14ge726w50ch2tmaw2a1x
Unique Paddle ID for this event, prefixed with evt_.
Pattern: ^evt_[a-z\d]{26}$
event_typestringrequired
Type of event sent by Paddle, in the format entity.event_type.
Values
+ Show all values
occurred_atstring (date-time)required
Example: 2024-10-12T07:20:50.52Z
RFC 3339 datetime string of when this event occurred.
notification_idstringrequired
Example: ntf_01ghbkd0frb9k95cnhwd1bxpvk
Unique Paddle ID for this notification, prefixed with ntf_.
Pattern: ^ntf_[a-z\d]{26}$
dataobjectrequired
New or changed entity.
idstringrequired
Example: apkexp_01jkas9tppn3bhadwpcyag45zd
Unique Paddle ID for this API key exposure entity, prefixed with apkexp_.
Pattern: ^apkexp_[a-z\d]{26}$
api_key_idstringrequired
Example: apikey_01gm106t81w94gyjgsaqypkjkl
Unique Paddle ID for this API key entity, prefixed with apikey_.
Pattern: ^apikey_[a-z\d]{26}$
risk_levelstringrequired
Risk level of this exposure.
Values
  • high
    API key exposed in a public repository. Automatically revoked.
  • low
    API key exposed but inactive. No action needed.
action_takenstringrequired
Action performed by Paddle as a result of this exposure.
Values
  • revoked
    Paddle automatically revoked the API key.
  • none
    Paddle took no action. Exposure should still be assessed, cleaned, and acted upon where needed.
sourcestringrequired
Source of this exposure.
Values
  • github
    API key found exposed on GitHub.
referencestringrequired
A unique URL or reference pointing to the source of the exposure. When source is github, a URL to the location of the exposure is returned.
Length: 1–250
descriptionstring | nullrequired
Additional details about this exposure.
Length: 1–250
created_atstring (date-time)required
Example: 2024-10-12T07:20:50.52Z
RFC 3339 datetime string of when this API key exposure was found. Set automatically by Paddle.
api_key_exposure.created
{
  "event_id": "evt_01jkdr0rc527wcjdg1txsdxhtk",
  "event_type": "api_key_exposure.created",
  "occurred_at": "2025-08-19T12:58:38.746382Z",
  "notification_id": "ntf_01jkdr1mgbe62eqkh3p0fq8b0s",
  "data": {
    "id": "apkexp_01jkas9tppn3bhadwpcyag45zd",
    "api_key_id": "apikey_01jkdpbhazdpn3wpcya45as9tg",
    "risk_level": "high",
    "action_taken": "revoked",
    "source": "github",
    "reference": "https://github.com/octocat/Hello-World/blob/12345600b9cbe38a219f39a9941c9319b600c002/foo/bar.txt",
    "description": "Exposed in Commit 12345600b9cbe38a219f39a9941c9319b600c002",
    "created_at": "2025-08-19T12:58:38.746382Z"
  }
}

Was this page helpful?