Security Update: Generating New GovSpend API Keys
As part of our compliance with SOC 2 security controls, we recently identified unusual activity involving API keys.
At GovSpend, protecting your account and data is a top priority. Our security team recently identified unusual activity involving API keys, and we're taking proactive steps to maintain a safe and secure experience for our customers.
As a precautionary measure, GovSpend is removing existing API keys and asking affected customers to generate new ones.
What Does This Mean for Your Organization?
If your team uses GovSpend API keys for applications like the GovSpend MCP server, you'll need to generate new keys and update any connected applications or integrations to maintain uninterrupted access.
Once your existing keys are removed, any integrations relying on those keys will no longer be able to authenticate until they've been updated.
As an effort to maintain this high level of security, you can expect to periodically be asked to update your API keys.
How to Generate New API Keys
Account Administrators can generate new API keys by following these steps:
- Log in to your GovSpend account.
- Navigate to Account > Settings > Organization > API Keys.
- Select Create API Key.
- Enter a name for your new key and click Submit.
- Copy your new API key and securely update any connected applications or integrations.
For additional instructions, visit our Search API Guide.
Need Help?
If you have questions or need assistance generating new API keys, our support team is here to help.
Thank you for your cooperation as we continue working to keep GovSpend safe and secure.